Package: rkhunter Version: 1.3.2-6 Severity: minor Tags: patch
Hi! In our setup we use rkhunter on several systems and monitor the results of the daily runs via our monitoring system. So, we'd like to disable the report mails. However, unsetting MAIL-ON-WARNING in /etc/rkhunter.conf wasn't enough, as we found out, that mails are also send from the cronjob itselfe (Why, if I may ask? Doesn't rkhunter itself already has the mail feature?) Unsetting REPORT_EMAIL in /etc/cron.daily/rkhunter also didn't solved the issue for us, as the "| /usr/sbin/sendmail $REPORT_EMAIL" in the cronjob fails. However, with the following patch: - if [ -s "$OUTFILE" ]; then + if [ -s "$OUTFILE" -a -n "$REPORT_EMAIL" ]; then Report mails can be disabled, while keeping the functionality. Best regards, Alexander -- System Information: Debian Release: 5.0.9 APT prefers oldstable APT policy: (500, 'oldstable') Architecture: i386 (i686) Kernel: Linux 2.6.32-5-xen-686 (SMP w/1 CPU core) Locale: LANG=de_DE@euro, LC_CTYPE=de_DE@euro (charmap=ISO-8859-15) (ignored: LC_ALL set to de_DE@euro) Shell: /bin/sh linked to /bin/bash Versions of packages rkhunter depends on: ii binutils 2.18.1~cvs20080103-7 The GNU assembler, linker and bina ii debconf [debconf-2. 1.5.24 Debian configuration management sy ii file 4.26-1 Determines file type using "magic" ii net-tools 1.60-22 The NET-3 networking toolkit ii perl 5.10.0-19lenny5 Larry Wall's Practical Extraction ii postfix [mail-trans 2.5.5-1.1+lenny1 High-performance mail transport ag Versions of packages rkhunter recommends: ii curl 7.18.2-8lenny5 Get a file from an HTTP, HTTPS or ii iproute 20080725-2 networking and traffic control too ii libmd5-perl 2.03-1 backwards-compatible wrapper for D ii links 2.1pre37-1.1 Web browser running in text mode ii lynx 2.8.7dev9-2.1 Text-mode WWW Browser (transitiona ii unhide 20080519-2 Forensic tool to find hidden proce ii wget 1.11.4-2+lenny2 retrieves files from the web Versions of packages rkhunter suggests: ii bsd-mailx 8.1.2-0.20071201cvs-3 A simple mail user agent -- debconf information: * rkhunter/apt_autogen: true * rkhunter/cron_daily_run: true * rkhunter/cron_db_update: true _______________________________________________ forensics-devel mailing list [email protected] http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/forensics-devel
