Bug#643668: rkhunter: add individual files to database with "--propupd"

A. N. Other a.n.other.debian at gmail.com
Wed Sep 28 14:06:07 UTC 2011


Package: rkhunter
Version: 1.3.6-4
Severity: wishlist

"rkhunter --propupd FOO" works if file FOO is already in the database,
but if FOO wasn't present at the last run (e.g. if the package
containing FOO has just been newly installed), you get an error:

  Filename is not in the "rkhunter.dat" file: FOO

It might be more useful if rkhunter added the file to the database in
this case. It seems that currently the only way to add a new file to
the database is to run "rkhunter --propupd", which updates the whole
database.





More information about the forensics-devel mailing list