Imported Upstream version 2.7

[ossec-hids.git] / src / rootcheck / db / rootkit_files.txt

diff --git a/src/rootcheck/db/rootkit_files.txt b/src/rootcheck/db/rootkit_files.txt
index efdbd21..3e6e466 100755 (executable)
--- a/src/rootcheck/db/rootkit_files.txt
+++ b/src/rootcheck/db/rootkit_files.txt
@@ -1,4 +1,5 @@
-# @(#) $Id$
+# @(#) $Id: ./src/rootcheck/db/rootkit_files.txt, 2011/09/08 dcid Exp $
+
 #
 # rootkit_files.txt, (C) Daniel B. Cid
 # Imported from the rootcheck project.
@@ -372,8 +373,8 @@ dev/grid-unhide-port-  ! Override rootkit ::/rootkits/override.php
 
 
 # PHALANX rootkit
-usr/share/.home.ph1     ! PHALANX rootkit ::
-usr/share/.home.ph1/tty ! PHALANX rootkit ::
+usr/share/.home*        ! PHALANX rootkit ::
+usr/share/.home*/tty    ! PHALANX rootkit ::
 etc/host.ph1            ! PHALANX rootkit ::
 bin/host.ph1            ! PHALANX rootkit ::