> From: john.ho...@plymouth.ac.uk
> To: rkhunter-users@lists.sourceforge.net
> Date: Wed, 12 Oct 2011 15:43:19 +0100
> Subject: Re: [Rkhunter-users] RKHunter warning: file does not exist
>
> On Wed, 2011-10-12 at 13:34 +0000, Ralph Seward wrote:
> > Dear All:
> >
> >
> > I recently upgraded my RKHunter to 1.3.8 and I think I finally managed
> > to get it configured properly. Today I received a warning that says:
> >
> >
> > Warning: The file '/usr/local/bin/curl' does not exist on the system,
> > but it is present in the rkhunter.dat file.
> > Warning: The file '/usr/local/bin/rkhunter' does not exist on the
> > system, but it is present in the rkhunter.dat file.
> >
> Hello,
>
> Because you have the 'rkhunter' file itself mentioned, I would suspect
> that there might be two versions of rkhunter on the system.
>
> I assume you ran 'rkhunter --propupd' after upgrading it.
Yes, indeed. And again whenever I make any changes to the conf file.
> The program uses the 'rkhunter' location from its config file (which in
> turn is taken from the installation options). OK, I see in the conf file this
> line:INSTALLDIR=/usr/localIf this means that it wants rkhunter to be there,
> this could be the problem.
> As such it should always
> be using the same command and config file(s) when running a check or the
> '--propupd' option. If it is not, then it is possible for rkhunter to
> think that itself doesn't exist.
>
> Check the log file (usually /var/log/rkhunter.log) to see what the PATH
> is, and check that the correct rkhunter is found from it, and to see
> where it thinks the config file is located. Again, check that this is
> the correct config file.
I don't see a PATH indicated in the log file:[03:05:03] Info: Command line is
/usr/local/bin/rkhunter --cronjob --report-warnings-only[03:05:03] Info:
Environment shell is /bin/bash; rkhunter is using bash[03:05:03] Info: Using
configuration file '/etc/rkhunter.conf'[03:05:03] Info: Installation directory
is '/usr/local'[03:05:03] Info: Using language 'en'[03:05:03] Info: Using
'/var/lib/rkhunter/db' as the database directory[03:05:03] Info: Using
'/usr/local/lib64/rkhunter/scripts' as the support script directory[03:05:03]
Info: Using '/sbin /bin /usr/sbin /usr/bin' as the command
directories[03:05:03] Info: Using '/' as the root directory by
default[03:05:03] Info: Using '/var/lib/rkhunter/tmp' as the temporary
directory(--clip--)[03:05:04] Info: Including user files for file properties
check:[03:05:04] /etc/rkhunter.confbut no PATH.
My guess is that rkhunter resides at /usr/local/bin/rkhunter and the conf wants
it to be in /usr/local/
But that would not explain the other warning: "The file '/usr/local/bin/curl'
does not exist on the system"
Ralph
>
>
>
>
> John.
>
> --
> John Horne Tel: +44 (0)1752 587287
> Plymouth University, UK Fax: +44 (0)1752 587001
>
> ------------------------------------------------------------------------------
> All the data continuously generated in your IT infrastructure contains a
> definitive record of customers, application performance, security
> threats, fraudulent activity and more. Splunk takes this data and makes
> sense of it. Business sense. IT sense. Common sense.
> http://p.sf.net/sfu/splunk-d2d-oct
> _______________________________________________
> Rkhunter-users mailing list
> Rkhunter-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/rkhunter-users
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2d-oct
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users
