| @@ -1,5 +1,5 @@
--- rkhunter-1.3.8/files/rkhunter.conf.orig 2010-11-13 21:25:22.000000000 +0100
-+++ rkhunter-1.3.8/files/rkhunter.conf 2011-09-09 11:28:18.151508358 +0200
++++ rkhunter-1.3.8/files/rkhunter.conf 2011-09-09 12:00:59.523146660 +0200
@@ -76,7 +76,7 @@
# NOTE: This option should be present in the configuration file.
#
@@ -45,7 +45,7 @@
#
# Allow the specified commands to have the immutable attribute set.
#
-@@ -489,9 +494,9 @@
+@@ -489,12 +494,12 @@
# The option may be specified more than once. The option
# may use wildcard characters.
#
@@ -57,8 +57,12 @@
+ALLOWHIDDENDIR="/dev/.static"
#ALLOWHIDDENDIR="/dev/.initramfs"
#ALLOWHIDDENDIR="/dev/.SRC-unix"
- #ALLOWHIDDENDIR="/dev/.mdadm"
-@@ -504,13 +509,15 @@
+-#ALLOWHIDDENDIR="/dev/.mdadm"
++ALLOWHIDDENDIR="/dev/.mdadm"
+
+ #
+ # Allow the specified hidden files to be whitelisted.
+@@ -504,13 +509,14 @@
# characters.
#
#ALLOWHIDDENFILE="/etc/.java"
@@ -66,7 +70,6 @@
-#ALLOWHIDDENFILE="/etc/.pwd.lock"
+ALLOWHIDDENFILE="/usr/share/man/man1/..1.gz"
+ALLOWHIDDENFILE="/etc/.pwd.lock"
-+ALLOWHIDDENFILE="/dev/.mdadm"
+ALLOWHIDDENFILE="/usr/share/man/man5/.k5login.5.gz"
#ALLOWHIDDENFILE="/etc/.init.state"
#ALLOWHIDDENFILE="/lib/.libcrypto.so.0.9.8e.hmac /lib/.libcrypto.so.6.hmac"
@@ -78,7 +81,7 @@
#ALLOWHIDDENFILE="/usr/lib/.libfipscheck.so.1.1.0.hmac"
#ALLOWHIDDENFILE="/usr/lib/.libfipscheck.so.1.hmac"
#ALLOWHIDDENFILE="/usr/lib/.libgcrypt.so.11.hmac"
-@@ -518,7 +525,7 @@
+@@ -518,7 +524,7 @@
#ALLOWHIDDENFILE="/usr/lib/hmaccalc/sha256hmac.hmac"
#ALLOWHIDDENFILE="/usr/lib/hmaccalc/sha384hmac.hmac"
#ALLOWHIDDENFILE="/usr/lib/hmaccalc/sha512hmac.hmac"
@@ -87,7 +90,7 @@
#
# Allow the specified processes to use deleted files. The
-@@ -633,6 +640,13 @@
+@@ -633,6 +639,13 @@
# be specified more than once.
#
#XINETD_ALLOWED_SVC=/etc/xinetd.d/echo
@@ -101,7 +104,7 @@
#
# This option tells rkhunter the local system startup file pathnames.
-@@ -704,7 +718,7 @@
+@@ -704,7 +717,7 @@
#
# Note above that for the Apache web server, the name 'httpd' is used.
#
|
