On Sun, 2013-09-01 at 15:51 -0600, Kevin Fenzi wrote:
> Two things we will need to adjust for recent Fedora releases: 
> 
> 1. syslog is now optional, and can be uninstalled or disabled by the
> admin of a machine. Can we check for systemd-journald running instead
> of just syslogd? Or make it optional/configurable?
> 
The CVS version already checks for systemd-journal, from the CHANGELOG:

 - The tests to see if 'syslog' is running, and its configuration
   file is present, have now been changed. The test has been renamed
   to state 'system logging' rather than 'syslog', and will now detect
   if 'systemd' logging is being used as well as, or instead of, syslog.


> 2. ifconfig (net-tools) is no longer installed by default. It's been
> replaced with 'ip'. If you don't have ifconfig installed, rkhunter
> reports: 
> 
> [13:46:38] Checking for promiscuous interfaces               [ Warning ]
> [13:46:38] Warning: Promiscuous network interface check skipped -
> unable to find the 'ifconfig' command.
> 
For Linux systems the code does actually already run both 'ifconfig' and
'ip' provided both commands are present (if 'ip' is missing it is logged
but no warning). This is to ensure that one or both commands detects a
promiscuous interface. I think it should be relatively easy (!) to have
it check 'ip' even if 'ifconfig' is missing.




John.

-- 
John Horne, Plymouth University, UK
Tel: +44 (0)1752 587287    Fax: +44 (0)1752 587001


------------------------------------------------------------------------------
Learn the latest--Visual Studio 2012, SharePoint 2013, SQL 2012, more!
Discover the easy way to master current and previous Microsoft technologies
and advance your career. Get an incredible 1,500+ hours of step-by-step
tutorial videos with LearnDevNow. Subscribe today and save!
http://pubads.g.doubleclick.net/gampad/clk?id=58040911&iu=/4140/ostg.clktrk
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to