From 72e6cb43ef99466a9dcb529813eb7b2617e7226e Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Mon, 31 Mar 2014 18:14:04 +0000 Subject: [PATCH] Add some exists whitelists for things we check but don't install on all machines. --- roles/rkhunter/templates/rkhunter.conf.j2 | 3 +++ 1 file changed, 3 insertions(+) diff --git a/roles/rkhunter/templates/rkhunter.conf.j2 b/roles/rkhunter/templates/rkhunter.conf.j2 index 52cb350c0a..da90d2508d 100644 --- a/roles/rkhunter/templates/rkhunter.conf.j2 +++ b/roles/rkhunter/templates/rkhunter.conf.j2 @@ -587,6 +587,9 @@ OS_VERSION_FILE=/etc/{{ ansible_distribution|lower }}-release #STAT_CMD=BUILTIN #READLINK_CMD=BUILTIN +EXISTWHITELIST=/usr/bin/GET +EXISTWHITELIST=/usr/bin/whatis + INSTALLDIR=/usr SCRIPTWHITELIST=/usr/bin/whatis SCRIPTWHITELIST=/usr/bin/ldd