<div dir="ltr">I guess we should keep it and for me the current setup for checking once a day is fine. It was working pretty well before the system upgrade.<div><br></div><div>What do you think about to add APT_AUTOGEN="yes" to /etc/default/rkhunter in order to enable automatic rkhunter database updates after software updates?</div><div><br></div><div>Have we already executed sudo rkhunter --propupd since the last update?</div><div><br></div><div>Currently we are using the 1.4.0 version. The last one available is 1.4.2. We could also update it.</div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Feb 24, 2016 at 4:08 AM, Bernie Innocenti <span dir="ltr"><<a href="mailto:bernie@codewiz.org" target="_blank">bernie@codewiz.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div>Hmpf... rkhunter needs to be updated regularly or it will keep moaning daily.<br>
<br>
Do we want to make it run less often or should I disable it?<br>
<br><br><div class="gmail_quote"><div><div class="h5">On February 23, 2016 10:32:13 PM PST, <a href="mailto:root@sugarlabs.org" target="_blank">root@sugarlabs.org</a> wrote:</div></div><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<pre><div><div class="h5">Warning: The O/S name or version has changed since the last run:<br> Old O/S value: Ubuntu 14.04.3 LTS New value: Ubuntu 14.04.4 LTS<br> Because of the change(s) the file properties checks may give some false-positive results.<br> You may need to re-run rkhunter with the '--propupd' option.<br>Warning: WARNING! It is the users responsibility to ensure that when the '--propupd' option<br> is used, all the files on their system are known to be genuine, and installed from a<br> reliable source. The rkhunter '--check' option will compare the current file properties<br> against previously stored values, and report if any values differ. However, rkhunter<br> cannot determine what has caused the change, that is for the user to do.<br>Warning: The file properties have changed:<br> File: /sbin/sulogin<br> Current hash: 6de810ad6fa4ba62ddb61b8d8ca373796c39837f<br>
Stored hash : 65190e4215cc434e4405ab06902cd4157981e445<br> Current inode: 2515049 Stored inode: 2515007<br> Current file modification time: 1455685146 (16-Feb-2016 23:59:06)<br> Stored file modification time : 1434339069 (14-Jun-2015 23:31:09)<br>Warning: The file properties have changed:<br> File: /usr/bin/last<br> Current hash: 01b54671ca1769b31a22a0a7b273d25e50fbcedb<br> Stored hash : fe1465ac9bee6592dbc088a0a437337f2e932ef4<br> Current inode: 1311229 Stored inode: 1311646<br> Current file modification time: 1455685146 (16-Feb-2016 23:59:06)<br> Stored file modification time : 1434339069 (14-Jun-2015 23:31:09)<br>Warning: The file properties have changed:<br> File: /usr/bin/ldd<br> Current hash: fef7edab0f0fc0889c3a4c4f415fa830c3b293a3<br> Stored hash : e4bf03f0f5d7cff6d6b91822f3e101ff59b6bd06<br> Current inode: 1311606 Stored inode:
1312373<br> Current file modification time: 1455650774 (16-Feb-2016 14:26:14)<br> Stored file modification time : 1424883242 (25-Feb-2015 11:54:02)<br><hr><br></div></div><span class="">Systems-logs mailing list<br><a href="mailto:Systems-logs@lists.sugarlabs.org" target="_blank">Systems-logs@lists.sugarlabs.org</a><br><a href="http://lists.sugarlabs.org/listinfo/systems-logs" target="_blank">http://lists.sugarlabs.org/listinfo/systems-logs</a><br></span></pre></blockquote></div><span class="HOEnZb"><font color="#888888"><br>
-- <br>
Sent from my Android device with K-9 Mail. Please excuse my brevity.</font></span></div><br>_______________________________________________<br>
Systems mailing list<br>
<a href="mailto:Systems@lists.sugarlabs.org">Systems@lists.sugarlabs.org</a><br>
<a href="http://lists.sugarlabs.org/listinfo/systems" rel="noreferrer" target="_blank">http://lists.sugarlabs.org/listinfo/systems</a><br>
<br></blockquote></div><br></div>