On Fri, 2007-11-23 at 05:14 -0600, Mike Blezien wrote:
> How does one fix this problem:
> ===================================================
> File updated: searched for 148 files, found 130, missing hashes 3
> Warning: No hash value found for file '/usr/bin/less' in the rkhunter.dat 
> file.
> Warning: No hash value found for file '/usr/bin/lynx' in the rkhunter.dat 
> file.
> Warning: No hash value found for file '/usr/bin/pstree' in the rkhunter.dat 
> file.
> ===================================================
> 
Section 3.8 of the FAQ deals with 'missing hashes'.

However, I find it odd that the files you mention are the same that I am
also having problems with on my RHEL4 servers. The problem is to do with
prelinking:

   /usr/sbin/prelink /usr/bin/less
   /usr/sbin/prelink: /usr/lib/libncursesw.so.5.4: .debug_loc adjusting
   unfinished

I have no idea what this means, but have put a message onto the RHEL
mailing list asking about it (no replies yet). If you run the above
prelink command you will probably get the same output (unless your
problem is something else or fixed by running 'rkhunter --propupd').

This is not something RKH can resolve (so '--propupd' won't help).
Unfortunately I cannot reboot my servers without some downtime notice,
but a reboot may sort things out. I have tried forcing prelink to relink
the programs/libraries, but that didn't seem to do any good. Ironically,
one RHEL4 server only has a problem with the '/usr/bin/less' file. I
suspect the problem started after a recent package update.



John.

-- 
---------------------------------------------------------------
John Horne, University of Plymouth, UK  Tel: +44 (0)1752 233914
E-mail: [EMAIL PROTECTED]       Fax: +44 (0)1752 233839

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to