Hi,
Le 09/06/2025 à 15:47, Ricky Tigg a écrit :
> I think Fedora uses the last git version, which is dated October 24, 2022,
plus some patches.
October 24, 2022 - How could this date be verified on my system? From my
investigation, I found that it was February 2018.
There is no easy way to verify version and date of unreleased version of RKH. I just have a look in the file
"rkhunter-1.4.6-29.fc42.src.rpm", I was wrong: the tarball is the one of plain 1.4.6. not the one of the last git version.
On https://sourceforge.net/p/rkhunter/support-requests/74/
Username: dogsbody | Nov 30, 2023 | "We still use rkhunter as part of our suite of protection on around 150 servers and run
https://rkhmirror.dogsbody.com/ for the times that sourceforge goes down."
There is only the plain 1.4.6 version on this mirror..
On https://www.rkhunter.dev/
Indeed, the project is said to have been since December 2023 sponsored by
Dogsbody Technology.
As you suggested, it would be worth investigating there - and that in the first
place.
On https://rkhmirror.dogsbody.com/
At pkgs/
"rkhunter-1.4.6.tar.gz 24-Feb-2018 23:17"
Here the version is even dated one day older than the one hosted on Sourceforge!
That's probably the date of the copy of SF repo or it's due to the time zone
change (dogsbody.com is in England)
Come to think of it, by the way, on Sourceforge, Rootkit Hunter declares "Brought to you by: dogsbody, dogsbodymark". One of
those names may be willing to discuss patches and signatures DBs.
Dogsbody is Dan Denton himself. I never heard of Dogsbodymark (Mark Flitter) . He create this Sourceforge account on
2025-05-15 (one month ago).
Maybe an employee of Dogsbody.com put in charge of RKH recently ?
On Github, khunter
No maintainer. Last commit dated on Feb 25, 2018 - authored by John Horne. Update RPM specifications file for version 1.4.6,
re-release of v. 1.4.6 tagged version-1.4.6a, itself tagged with date Feb 25, 2018.
There are maintainers, but the list is private: "This organization has no public members. You must be a member to see who’s a
part of this organization." (read this on https://github.com/Rootkit-Hunter). That seems to be the new official repo: there is
a link to https://www.rkhunter.dev/ there.
On Sourceforge
Contact information about "John Horne"
"John Horne, University of Plymouth, UK (...)
E-mail: E-mail: Joh...@pl... (...)"
It is to be expected that the contact details displayed for this user have become obsolete since the user's last message on a
mailing list on 17 February 2006. Thus it seems wise not to entertain any hope of being able to contact this user by email at
john.ho...@plymouth.ac.uk, which would likely have been that of this user.
John gave the admin right and the ownership of SF repo to Dogsbody, except these changes, everything remains unchanged since
then (except for 2 or 3 added issues).
Regards.
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users
