Your message dated Sat, 26 Dec 2009 21:22:30 +0000
with message-id <[email protected]>
and subject line Bug#559696: fixed in rkhunter 1.3.6-3
has caused the Debian Bug report #559696,
regarding rkhunter: False warnings from USER_FILEPROP_FILES_DIRS
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
559696: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=559696
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: rkhunter
Version: 1.3.6-2
Severity: normal
Hi!
I have the following lines in my /etc/rkhunter.conf:
USER_FILEPROP_FILES_DIRS="/etc/init.d/checkroot.sh"
USER_FILEPROP_FILES_DIRS="/etc/init.d/hdparm"
USER_FILEPROP_FILES_DIRS="/etc/init.d/bootlogd"
After adding them there, I ran "rkhunter --propupd" as instructed in the
surrounding comments.
Every time rkhunter runs I now get this:
Warning: The command '/etc/init.d/checkroot.sh' has been replaced by a script:
/etc/init.d/checkroot.sh: POSIX shell script text executable
Warning: The command '/etc/init.d/hdparm' has been replaced by a script:
/etc/init.d/hdparm: POSIX shell script text executable
Warning: The command '/etc/init.d/bootlogd' has been replaced by a script:
/etc/init.d/bootlogd: POSIX shell script text executable
I expected not to get those warnings.
What can I do to get rid of them?
Regards //Johan
-- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (990, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.30-2-686 (SMP w/2 CPU cores)
Locale: LANG=sv_SE.UTF-8, LC_CTYPE=sv_SE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages rkhunter depends on:
ii binutils 2.20-4 The GNU assembler, linker and bina
ii debconf [debconf-2.0] 1.5.28 Debian configuration management sy
ii file 5.03-4 Determines file type using "magic"
ii net-tools 1.60-23 The NET-3 networking toolkit
ii perl 5.10.1-8 Larry Wall's Practical Extraction
ii postfix [mail-transport-agent 2.6.5-3 High-performance mail transport ag
Versions of packages rkhunter recommends:
ii curl 7.19.7-1 Get a file from an HTTP, HTTPS or
ii elinks 0.12~pre5-1+b1 advanced text-mode WWW browser
ii iproute 20090324-1 networking and traffic control too
ii libdigest-sha-perl 5.47-1 Perl extension for SHA-1/224/256/3
ii lsof 4.81.dfsg.1-1 List open files
ii lynx 2.8.8dev.1-1 Text-mode WWW Browser (transitiona
ii perl [libdigest-sha-perl] 5.10.1-8 Larry Wall's Practical Extraction
pn unhide <none> (no description available)
ii wget 1.12-1.1 retrieves files from the web
Versions of packages rkhunter suggests:
ii bsd-mailx 8.1.2-0.20090911cvs-2 simple mail user agent
pn tripwire <none> (no description available)
-- debconf information:
* rkhunter/apt_autogen: true
* rkhunter/cron_db_update: true
* rkhunter/cron_daily_run: true
--- End Message ---
--- Begin Message ---
Source: rkhunter
Source-Version: 1.3.6-3
We believe that the bug you reported is fixed in the latest version of
rkhunter, which is due to be installed in the Debian FTP archive:
rkhunter_1.3.6-3.debian.tar.gz
to main/r/rkhunter/rkhunter_1.3.6-3.debian.tar.gz
rkhunter_1.3.6-3.dsc
to main/r/rkhunter/rkhunter_1.3.6-3.dsc
rkhunter_1.3.6-3_all.deb
to main/r/rkhunter/rkhunter_1.3.6-3_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Julien Valroff <[email protected]> (supplier of updated rkhunter package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 26 Dec 2009 21:00:54 +0100
Source: rkhunter
Binary: rkhunter
Architecture: source all
Version: 1.3.6-3
Distribution: unstable
Urgency: low
Maintainer: Julien Valroff <[email protected]>
Changed-By: Julien Valroff <[email protected]>
Description:
rkhunter - rootkit, backdoor, sniffer and exploit scanner
Closes: 559696 562588
Changes:
rkhunter (1.3.6-3) unstable; urgency=low
.
* Add a note in README.Debian about the hdparm string causing rkhunter
to report a possible Xzibit rootkit (Closes: #559696)
* Add a note about local configuration file in README.Debian
* Make debian/copyright machine-interpretable as per DEP5
* apps test is now disabled by default to avoid warnings about
outdated applications
* Add a note in README.Debian about IRC daemons triggering warnings
(Closes: #562588)
Checksums-Sha1:
53520e02958448bb2d87da92cf490c879278dae3 1241 rkhunter_1.3.6-3.dsc
29b98e16f1e356edff3cb9c3813507512abf16de 25349 rkhunter_1.3.6-3.debian.tar.gz
41c5df02ab670fb1458b96c6c00cd08115252f37 221866 rkhunter_1.3.6-3_all.deb
Checksums-Sha256:
2409006ceed03086b88767184fb629e0c6b16a3ce57f793f9a8f113990e08b88 1241
rkhunter_1.3.6-3.dsc
e87767417d37446a19c82a5b631e105987eff0baaea2cbf57130f93677b5b495 25349
rkhunter_1.3.6-3.debian.tar.gz
728ab0515850f3cf46515dd5476406155cace7e3b5d65a57442ce57d9e109ab0 221866
rkhunter_1.3.6-3_all.deb
Files:
949dab0ba527c27487ffb397e493b921 1241 admin optional rkhunter_1.3.6-3.dsc
7a5236f0e50601201057e76a83fb635d 25349 admin optional
rkhunter_1.3.6-3.debian.tar.gz
ab602f8f56ae9232ca43e2b3ae64c03e 221866 admin optional rkhunter_1.3.6-3_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEARECAAYFAks2bDIACgkQIQvyq59x1ElnLgCgn5NuKgxiP5uBWyjwbNxIYSdg
7NsAoIOdC+7BIRoIGvJH1lx5YWxB5j5K
=B6Hh
-----END PGP SIGNATURE-----
--- End Message ---
