Hi I am currently receiving daily emails (from: root, to: root) about rkhunter. How can I change the delivery address for these emails? For reference, the emails say: Code: From [email protected] Fri May 4 06:28:43 2012 Return-Path: <[email protected]> X-Original-To: [email protected] Delivered-To: [email protected] X-Virus-Scanned: Debian amavisd-new at myserver.com Subject: [rkhunter] myserver.com - Daily report To: [email protected] Date: Fri, 4 May 2012 06:28:27 +0100 (BST) From: [email protected] (root) Status: RO Warning: The file '/usr/bin/GET' exists on the system, but it is not present in the rkhunter.dat file. Warning: The file '/usr/bin/lwp-request' exists on the system, but it is not present in the rkhunter.dat file. Warning: The file '/usr/sbin/inetd' exists on the system, but it is not present in the rkhunter.dat file. Warning: No output found from the lsmod command or the /proc/modules file: /proc/modules output: lsmod output: Warning: The SSH and rkhunter configuration options should be the same: SSH configuration option 'PermitRootLogin': yes Rkhunter configuration option 'ALLOW_SSH_ROOT_USER': no Warning: Hidden directory found: /dev/.udev One or more warnings have been found while checking the system. Please check the log file (/var/log/rkhunter.log)
I have done this ... however it still sends to [email protected] even thought I have that set to [email protected]. PLEASE HELP!
Old Thread, but top result on google. I found the solution (on CentOS) was to edit the system configuration file for Rootkit Hunter at /etc/sysconfig/rkhunter # vim /etc/sysconfig/rkhunter MAILTO=[email protected] Hope this helps others