Your message dated Sat, 29 Mar 2025 16:51:43 +0000
with message-id <[email protected]>
and subject line Bug#1098497: fixed in rkhunter 1.4.6-13
has caused the Debian Bug report #1098497,
regarding rkhunter -C complains about WEB_CMD
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1098497: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098497
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: rkhunter
Version: 1.4.6-11
Severity: minor
Dear Maintainer,
I was updating the rkhunter configuration and ran rkhunter -C as
suggested. It generated the following message:
wish@cerberus:/usr/share/doc/rkhunter$ sudo -i rkhunter -C
Invalid WEB_CMD configuration option: Relative pathname: "/bin/false"
I added a file with the following contents in rkhunter.d to silence it.
#Shut rkhunter -C up by removing quotes
WEB_CMD=/bin/false
>From the rkhunter.conf file:
# Some of the options are space-separated lists, others, typically those
# specifying pathnames, are newline-separated lists. These must be entered
# as one item per line. Quotes must not be used to surround the pathname.
#
It appears rkhunter -C interprets WEB_CMD as a "newline-separated list" and
therefore complains about the quotes. Some of the examples in the
rkhunter.conf file have quotes implying it is a space-separated list.
If it is interpreted by the main rkhunter process as newline-separated
then presumably all that is needed is to remove the quotes from both the
WEB_CMD line and the associated examples. If rkhunter -C interprets it
differently from the main rkhunter process then you have a real bug on
your hands.
I have checked and the quotes are still present in the current sid package.
-- System Information:
Debian Release: 12.9
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 6.1.0-31-amd64 (SMP w/2 CPU threads; PREEMPT)
Kernel taint flags: TAINT_FIRMWARE_WORKAROUND
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages rkhunter depends on:
ii binutils 2.40-2
ii debconf [debconf-2.0] 1.5.82
ii file 1:5.44-3
ii lsof 4.95.0-1
ii net-tools 2.10-0.1
ii perl 5.36.0-7+deb12u1
ii ucf 3.0043+nmu1+deb12u1
Versions of packages rkhunter recommends:
ii bsd-mailx [mailx] 8.1.2-0.20220412cvs-1
ii curl 7.88.1-10+deb12u8
ii e2fsprogs 1.47.0-2
ii exim4-daemon-light [mail-transport-agent] 4.96-15+deb12u6
ii iproute2 6.1.0-3
ii mailutils [mailx] 1:3.15-4
pn unhide <none>
ii unhide.rb 22-6
ii wget 1.21.3-1+b2
Versions of packages rkhunter suggests:
ii liburi-perl 5.17-1
ii libwww-perl 6.68-1
ii powermgmt-base 1.37
-- Configuration Files:
/etc/rkhunter.conf changed:
UPDATE_MIRRORS=0
MIRRORS_MODE=1
TMPDIR=/var/lib/rkhunter/tmp
DBDIR=/var/lib/rkhunter/db
SCRIPTDIR=/usr/share/rkhunter/scripts
UPDATE_LANG="en"
LOGFILE=/var/log/rkhunter.log
USE_SYSLOG=authpriv.warning
AUTO_X_DETECT=1
ALLOW_SSH_ROOT_USER=without-password
ALLOW_SSH_PROT_V1=0
ENABLE_TESTS=ALL
DISABLE_TESTS=suspscan hidden_ports hidden_procs deleted_files packet_cap_apps
apps
PKGMGR=DPKG
SCRIPTWHITELIST=/usr/bin/egrep
SCRIPTWHITELIST=/usr/bin/fgrep
SCRIPTWHITELIST=/usr/bin/which
SCRIPTWHITELIST=/usr/bin/ldd
SCRIPTWHITELIST=/usr/bin/which.debianutils
SCRIPTWHITELIST=/usr/sbin/adduser
ALLOWHIDDENDIR=/etc/.java
ALLOWHIDDENFILE=/usr/share/man/man5/.k5login.5.gz
ALLOWHIDDENFILE=/usr/share/man/man5/.k5identity.5.gz
ALLOWIPCPROC=/usr/lib/firefox-esr/firefox-esr
ALLOWIPCPROC=/usr/bin/dunst
ALLOWIPCPROC=/usr/lib/libreoffice/program/soffice.bin
INETD_ALLOWED_SVC=discard ident printer
WEB_CMD="/bin/false"
INSTALLDIR=/usr
-- debconf information:
* rkhunter/cron_db_update: true
* rkhunter/cron_daily_run: true
* rkhunter/apt_autogen: true
--- End Message ---
--- Begin Message ---
Source: rkhunter
Source-Version: 1.4.6-13
Done: Francois Marier <[email protected]>
We believe that the bug you reported is fixed in the latest version of
rkhunter, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Francois Marier <[email protected]> (supplier of updated rkhunter package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 29 Mar 2025 09:10:16 -0700
Source: rkhunter
Architecture: source
Version: 1.4.6-13
Distribution: unstable
Urgency: medium
Maintainer: Debian Security Tools <[email protected]>
Changed-By: Francois Marier <[email protected]>
Closes: 1098497
Changes:
rkhunter (1.4.6-13) unstable; urgency=medium
.
[ Carles Pina i Estany ]
* Added po-debconf Catalan translation
.
[ Thomas Reim ]
* Wrong WEB_CMD leads to error message (closes: #1098497)
.
[ Francois Marier ]
* Bump Standards-Version up to 4.7.2
* Bump copyright year in debian/copyright
* Run "debputy reformat --style black"
Checksums-Sha1:
639f26e034e52a378f3abbe47c7f372766fa1d39 2069 rkhunter_1.4.6-13.dsc
fcd5435dcea500472f8e0abda9037d3041f4717b 30160 rkhunter_1.4.6-13.debian.tar.xz
4d931e6d23c09ffb7e0b33a9c25b05ea182017dc 5389
rkhunter_1.4.6-13_source.buildinfo
Checksums-Sha256:
59fd31fd205e7f189f9675ed9df31c2e3763d824fc5f85970e3c0005d2e3d52b 2069
rkhunter_1.4.6-13.dsc
ece5f4365381c26cc071e404236f22a3ad3e46a4bdf6df5eb94d0a7a60245bd8 30160
rkhunter_1.4.6-13.debian.tar.xz
435da360d8208b147d89e4264ce88c07dfd80a07bc66dc4c0cbeec544e7a4ca2 5389
rkhunter_1.4.6-13_source.buildinfo
Files:
d59d70d9aeb8a422c9208ae1115ec698 2069 admin optional rkhunter_1.4.6-13.dsc
03ce666faa51ae117f1ab468c67856b4 30160 admin optional
rkhunter_1.4.6-13.debian.tar.xz
f44d732b984bca81102daf1453f375dc 5389 admin optional
rkhunter_1.4.6-13_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=XjtL
-----END PGP SIGNATURE-----
pgp04KNkrlgAB.pgp
Description: PGP signature
--- End Message ---
