File rkhunter-config.patch of Package ix-rkhunter

File rkhunter-config.patch of Package ix-rkhunter (Revision 12)

Currently displaying revision 12, show latest

--- rkhunter-1.3.0/files/rkhunter.conf.orig	2007-09-01 15:05:26.000000000 +0200
+++ rkhunter-1.3.0/files/rkhunter.conf	2008-01-15 14:55:31.000000000 +0100
@@ -59,7 +59,7 @@
 # Multiple addresses may be specified simply be separating them
 # with a space.
 #
-#MAIL-ON-WARNING=me@mydomain   root@mydomain
+MAIL-ON-WARNING=sudreport@internetx.de
 
 #
 # Specify the mail command to use if MAIL-ON-WARNING is set.
@@ -147,7 +147,7 @@
 # 'PermitRootLogin' option. A warning will be displayed if they do not
 # match. This option has a default value of "no".
 #
-ALLOW_SSH_ROOT_USER=no
+ALLOW_SSH_ROOT_USER=yes
 
 #
 # Allow the use of the SSH-1 protocol which is theoretically weaker than SSH-2.
@@ -247,7 +247,7 @@
 # For any file not part of a package, rkhunter will revert to using
 # the HASH_FUNC hash function instead.
 #
-#PKGMGR=NONE
+PKGMGR=RPM
 
 #
 # Whitelist various attributes of the specified files.
@@ -273,10 +273,12 @@
 # Allow the specified commands to be scripts.
 # One command per line (use multiple SCRIPTWHITELIST lines).
 #
-#SCRIPTWHITELIST=/sbin/ifup
-#SCRIPTWHITELIST=/sbin/ifdown
-#SCRIPTWHITELIST=/usr/bin/groups
-
+SCRIPTWHITELIST=/sbin/ifup
+SCRIPTWHITELIST=/sbin/ifdown
+SCRIPTWHITELIST=/usr/bin/groups
+SCRIPTWHITELIST=/usr/bin/whatis
+SCRIPTWHITELIST=/usr/bin/ldd
+SCRIPTWHITELIST=/usr/bin/GET
 #
 # Allow the specified commands to have the immutable attribute set.
 # One command per line (use multiple IMMUTWHITELIST lines).
@@ -287,11 +289,11 @@
 # Allow the specified hidden directories.
 # One directory per line (use multiple ALLOWHIDDENDIR lines).
 #
-#ALLOWHIDDENDIR=/etc/.java
-#ALLOWHIDDENDIR=/dev/.udev
+ALLOWHIDDENDIR=/etc/.java
+ALLOWHIDDENDIR=/dev/.udev
 #ALLOWHIDDENDIR=/dev/.udevdb
 #ALLOWHIDDENDIR=/dev/.udev.tdb
-#ALLOWHIDDENDIR=/dev/.static
+ALLOWHIDDENDIR=/dev/.static
 #ALLOWHIDDENDIR=/dev/.initramfs
 #ALLOWHIDDENDIR=/dev/.SRC-unix
 
@@ -300,8 +302,8 @@
 # One file per line (use multiple ALLOWHIDDENFILE lines).
 # 
 #ALLOWHIDDENFILE=/etc/.java
-#ALLOWHIDDENFILE=/usr/share/man/man1/..1.gz
-#ALLOWHIDDENFILE=/etc/.pwd.lock
+ALLOWHIDDENFILE=/usr/share/man/man1/..1.gz
+ALLOWHIDDENFILE=/etc/.pwd.lock
 #ALLOWHIDDENFILE=/etc/.init.state
 
 #
@@ -381,7 +383,10 @@
 # Only one service (file) per line (use multiple XINETD_ALLOWED_SVC lines).
 #
 #XINETD_ALLOWED_SVC=/etc/xinetd.d/echo
-
+XINETD_ALLOWED_SVC=/etc/xinetd.d/ftp_psa
+XINETD_ALLOWED_SVC=/etc/xinetd.d/smtp_psa
+XINETD_ALLOWED_SVC=/etc/xinetd.d/smtps_psa
+XINETD_ALLOWED_SVC=/etc/xinetd.d/poppassd_psa
 #
 # This setting tells rkhunter the local system startup file pathnames.
 # More than one file may be present on the system, and so this option