rkhunter warning

[Steve Blackwell]

On Thu, 16 Sep 2010 18:58:00 -0600
Kevin Fenzi <kevin at scrye.com> wrote:

> On Thu, 16 Sep 2010 10:19:50 -0400
> Steve Blackwell <zephod at cfl.rr.com> wrote:
> 
> > Hmmm... Well this is strange. Even though I've added
> > ALLOWHIDDENDIR=/etc/.java to my /etc/rkhunter.conf file, I'm still
> > getting warnings. Is there a way to tell what rkhunter is reading
> > from the conf file?
> 
> Well, it should read /etc/rkhunter.conf and also 
> /etc/rkhunter.conf.local (which is the better place to make local
> changes that still allow you to get changes from package updates to
> /etc/rkhunter.conf. 
> 
> Are you sure this is a dir and not a file?
> 
> You could try --debug I suppose. 
> 
> kevin

/etc/.java is definitely a directory
$ ls -ld /etc/.java
drwxr-xr-x. 3 root root 4096 2010-08-27 21:01 /etc/.java

I don't have a /etc/rkhunter.conf/local file
$ ls -al /etc/rkhunter*
-rw-r-----. 1 root root 31048 2010-09-03 09:54 /etc/rkhunter.conf
-rw-r-----. 1 root root 31030 2010-06-26 20:48 /etc/rkhunter.conf.rpmnew

I ran:
# rkhunter --check --debug
and I have a file in /tmp

Doh!!! Never mind. I have fat fingers. I typed:

ALLOWHIDDEBDIR=/etc/.java
instead of 
ALLOWHIDDENDIR=/etc/.java
in my conf file.

Apologies for the noise.
Steve
-- 
Changing lives one card at a time

http://www.send1cardnow.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 230 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/users/attachments/20100917/088e3172/attachment.bin