Hi, Le dimanche 16 décembre 2007 à 15:23 +0100, Oswald Buddenhagen a écrit : > Package: rkhunter > Version: 1.3.0-2 > Severity: important > > Updating the file properties database: > [ Rootkit Hunter version 1.3.0 ] > File created: searched for 154 files, found 135, missing hashes 3 > dpkg: error processing rkhunter (--configure): > subprocess post-installation script returned error exit status 1 > > this is a fresh install without prior configs.
This is from the rkhunter FAQ: > 3.8) When I used the '--propupd' option, Rootkit Hunter told me > I had some missing hashes. What does this mean? > > A. Your system probably uses prelinking (the log file will say if > it does or not). Sometimes a file may be updated but not be > prelinked. When this happens RKH cannot determine the files hash > value. If you run the command 'prelink --verify --sha <file>' > on the file, it will probably give an error about the files > dependencies having changed. This is what RKH sees, and flags > it as a missing hash. If you are sure that the file is genuine, > then you can try using 'prelink <file>' to correct it. The > 'prelink' command above should then work. Re-run RKH with the > '--propupd' option to ensure that all the hash values are recorded. Note that --propupd is launched at post-install time if you have activated the automatic properties database update. You can see what are the files concern by this issue in /var/log/rkhunter.log I hope this can help, if not, please do not hesitate to contact me. Cheers, Julien
