On Thu, 10 Apr 2014 22:46:56 +0100
John Horne <john.horne(a)plymouth.ac.uk> wrote:
On Thu, 2014-04-10 at 09:53 +0100, Frank Murphy wrote:
> /usr/bin/rkhunter: Osx.Worm.Inqtana-3 FOUND
> /usr/bin/rkhunter: moved to '/var/cache/clam/rkhunter.001'
>
The ClamAV Inqtana-3 check looks for a couple of phrases (actually
parts of filenames) which also occur in rkhunter as part of its
Inqtana checks. I would say the ClamAV check is too simple, whereas
rkhunter actually tests that the filenames exist.
So If I exclude rkhunter in clamav should be ok.
___
Regards
Frank
frankly3d.com