anchor.diff:  # the xinetd file pathnames.
   # Only one service (file) per line (use multiple XINETD_ALLOWED_SVC lines).
   #
  -#XINETD_ALLOWED_SVC=/etc/xinetd.d/echo
  +XINETD_ALLOWED_SVC=/etc/xinetd.d/nrpe
   
   #
   # This setting tells rkhunter the local system startup file pathnames.
  
positive.code: # Even though this adds to the running time it is highly recommended to
  # leave it like this.
  #
  #SCAN_MODE_DEV=THOROUGH
  
  #
  # This setting tells rkhunter where the inetd configuration
  # file is located.
  #
  #INETD_CONF_PATH=/etc/inetd.conf
  
  #
  # Allow the following enabled inetd services.
  
negative.code: #
  # Below are some Solaris 9 and 10 services that may want to be whitelisted.
  #
  #INETD_ALLOWED_SVC=/etc/xinet.d/nrpe
  #INETD_ALLOWED_SVC=echo
  #INETD_ALLOWED_SVC=/usr/dt/bin/rpc.ttdbserverd
  #INETD_ALLOWED_SVC=/usr/openwin/lib/fs.auto
  