/var/log/rkhunter.log existiert nicht oder ist leer

[Nuxwin]

(12-13-2009 09:55 PM)Rafioso Wrote:  Man you're great. It works! Your second name should be Mr.rkhunter xD

THX

Thank

Alternative solution:

Initially, you should remove all log files related to rkhunter:

Code:

# rm /var/log/rkhunter.*

Then you must edit the file /etc/cron.weekly/rkhunter as follow:

Replace this code part :

Code:

case "$DB_UPDATE_EMAIL" in
                        [Yy]*)
                                (
                                echo "Subject: [rkhunter] $(hostname -f) - Weekly database update"
                                echo "To: $REPORT_EMAIL"
                                echo ""
                                $RKHUNTER --versioncheck --nocolors
                                $RKHUNTER --update --nocolors
                                ) | /usr/sbin/sendmail $REPORT_EMAIL
                        ;;
                        *)
                                $RKHUNTER --versioncheck --nolog 1>/dev/null 2>$OUTFILE
                                $RKHUNTER --update --nolog 1>/dev/null 2>>$OUTFILE
                        ;;
                esac

by

Code:

case "$DB_UPDATE_EMAIL" in
                        [Yy]*)
                                (
                                echo "Subject: [rkhunter] $(hostname -f) - Weekly database update"
                                echo "To: $REPORT_EMAIL"
                                echo ""
                                $RKHUNTER --versioncheck --nocolors --nolog
                                $RKHUNTER --update --nocolors --nolog
                                ) | /usr/sbin/sendmail $REPORT_EMAIL
                        ;;
                        *)
                                $RKHUNTER --versioncheck --nolog 1>/dev/null 2>$OUTFILE
                                $RKHUNTER --update --nolog 1>/dev/null 2>>$OUTFILE
                        ;;
                esac

After simply regenerate the files:

Code:

# rkhunter --cronjob --createlogfile \
/var/log/rkhunter.log.root --display-logfile 1> /var/log/rkhunter.log 2>/dev/null

Here, we have simply added the --nolog for all commands to avoid to recreate the default log file during update process.

See "rkhunter --help" for more information about this issue.


I'll update the ispcp setup scripts with this last solution.