rkhunter.conf: fix ALLOWPROCLISTEN (missing "EN"...) and allow some p…

…rocesses to

use some deleted files, to avoid some false positives

Signed-off-by: KheOps <kheops@ceops.eu>

roles/common/files/etc/rkhunter.conf

@@ -560,6 +560,8 @@ IMMUTABLE_SET=0
 #ALLOWPROCDELFILE="/usr/lib/iceweasel/firefox-bin"
 #ALLOWPROCDELFILE="/usr/bin/file-roller"
 
+ALLOWPROCDELFILE="/usr/sbin/cron:/tmp/tmp* /bin/dash:/tmp/tmp* /bin/bash:/tmp/tmp* /bin/run-parts:/tmp/tmp*"
+
 #
 # Allow the specified processes to listen on any network interface.
 #
@@ -570,7 +572,7 @@ IMMUTABLE_SET=0
 #ALLOWPROCLISTEN="/usr/sbin/pppoe /usr/sbin/tcpdump"
 #ALLOWPROCLISTEN="/usr/sbin/snort-plain"
 
-ALLOWPROCLIST="/usr/bin/suricata"
+ALLOWPROCLISTEN="/usr/bin/suricata"
 
 #
 # Allow the specified network interfaces to be in promiscuous mode.