From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 874551395E2 for ; Mon, 14 Nov 2016 12:50:32 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 174C821C06B; Mon, 14 Nov 2016 12:50:27 +0000 (UTC) Received: from mail0205.smtp25.com (mail0205.smtp25.com [174.37.170.205]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 67ED7E0A40 for ; Mon, 14 Nov 2016 12:50:26 +0000 (UTC) Received: from ccs.covici.com (localhost [127.0.0.1]) by ccs.covici.com (8.14.9/8.14.8) with ESMTP id uAECoO51025318 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Mon, 14 Nov 2016 07:50:24 -0500 Received: (from covici@localhost) by ccs.covici.com (8.14.9/8.13.7/Submit) id uAECoOQ6025316; Mon, 14 Nov 2016 07:50:24 -0500 Date: Mon, 14 Nov 2016 07:50:24 -0500 Message-ID: From: John Covici To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] gentoo and rootkit hunter In-Reply-To: <20161114124333.6839aba7@digimed.co.uk> References: <20161114124333.6839aba7@digimed.co.uk> User-Agent: Wanderlust/2.15.9 (Almost Unreal) SEMI-EPG/1.14.7 (Harue) FLIM/1.14.9 (=?ISO-8859-4?Q?Goj=F2?=) APEL/10.8 EasyPG/1.0.0 Emacs/25.1.50 (x86_64-pc-linux-gnu) MULE/6.0 (HANACHIRUSATO) Organization: Covici Computer Systems Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII X-SpamH-Filter: s-out-001.smtp25.com-uAECoOLJ005793 X-SpamH-OriginatingIP: 70.109.53.110 X-Archives-Salt: f39a3347-ac2f-43ae-ae2b-03bb4993b8d9 X-Archives-Hash: db702bc976ce9ce545a0e39a41a813c6 On Mon, 14 Nov 2016 07:43:33 -0500, Neil Bothwick wrote: > > [1 ] > On Mon, 14 Nov 2016 07:20:25 -0500, John Covici wrote: > > > Hi. I downloaded rootkithunter a few days ago and discovered that it > > was not looking for the apache modules in the correct place. Its a > > script so I can find and modify the variable, but I wonder if there is > > a correct way to do this, given the kind of app we are dealing with > > here. > > This is the sort of thing that could be handled by the ebuild, so a bug > report on b.g.o is in order. Really, it's a bug in rkhunter, IMO, you > should be able to specify MOD_DIRS or HTTPDDIRS in the config file. Can't disagree with that. I will see how far I get with this one. -- Your life is like a penny. You're going to lose it. The question is: How do you spend it? John Covici covici@ccs.covici.com