Bug#609637: rkhunter says wrong hash for dpkg and dpkg-query after apt-get dist-upgrade

2011-01-10 Thread Steinar Bang
Package: rkhunter
Version: 1.3.2-6
Severity: normal



*** /tmp/reportbug-rkhunter-20110111-22751-5cBGw2
Subject: rkhunter says wrong hash for dpkg and dpkg-query after apt-get 
dist-upgrade
Package: rkhunter
Version: 1.3.2-6
Severity: normal

After the last apt-get dist-upgrade on my debian stable machine I get the 
following daily emails from rkhunter:
Warning: The file properties have changed:
 File: /usr/bin/dpkg
 Current hash: d478e79772b78b64cd5161a4d684b8f52f2e7f5e
 Stored hash : 3f790c813fb21d7f9161e9a8586858b4a5d8bb16
 Current inode: 270438Stored inode: 270423
 Current file modification time: 129405
 Stored file modification time : 1288522576
Warning: The file properties have changed:
 File: /usr/bin/dpkg-query
 Current inode: 270436Stored inode: 270421
 Current file modification time: 129405
 Stored file modification time : 1288522576


-- System Information:
Debian Release: 5.0.7
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32.26-kvm-i386-20101122 (SMP w/1 CPU core)
Locale: LANG=en_GB, LC_CTYPE=en_GB (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash

Versions of packages rkhunter depends on:
ii  binutils2.18.1~cvs20080103-7 The GNU assembler, linker and bina
ii  debconf [debconf-2. 1.5.24   Debian configuration management sy
ii  exim4-daemon-heavy  4.69-9+lenny1Exim MTA (v4) daemon with extended
ii  file4.26-1   Determines file type using magic
ii  net-tools   1.60-22  The NET-3 networking toolkit
ii  perl5.10.0-19lenny2  Larry Wall's Practical Extraction 

Versions of packages rkhunter recommends:
ii  iproute  20080725-2  networking and traffic control too
ii  libmd5-perl  2.03-1  backwards-compatible wrapper for D
pn  unhide   none  (no description available)
ii  wget 1.11.4-2+lenny2 retrieves files from the web

Versions of packages rkhunter suggests:
ii  bsd-mailx  8.1.2-0.20071201cvs-3 A simple mail user agent

-- debconf information:
  rkhunter/apt_autogen: false
  rkhunter/cron_daily_run:
  rkhunter/cron_db_update:


-- System Information:
Debian Release: 5.0.7
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32.26-kvm-i386-20101122 (SMP w/1 CPU core)
Locale: LANG=en_GB, LC_CTYPE=en_GB (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash

Versions of packages rkhunter depends on:
ii  binutils2.18.1~cvs20080103-7 The GNU assembler, linker and bina
ii  debconf [debconf-2. 1.5.24   Debian configuration management sy
ii  exim4-daemon-heavy  4.69-9+lenny1Exim MTA (v4) daemon with extended
ii  file4.26-1   Determines file type using magic
ii  net-tools   1.60-22  The NET-3 networking toolkit
ii  perl5.10.0-19lenny2  Larry Wall's Practical Extraction 

Versions of packages rkhunter recommends:
ii  iproute  20080725-2  networking and traffic control too
ii  libmd5-perl  2.03-1  backwards-compatible wrapper for D
pn  unhide   none  (no description available)
ii  wget 1.11.4-2+lenny2 retrieves files from the web

Versions of packages rkhunter suggests:
ii  bsd-mailx  8.1.2-0.20071201cvs-3 A simple mail user agent

-- debconf information:
  rkhunter/apt_autogen: false
  rkhunter/cron_daily_run:
  rkhunter/cron_db_update:



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#609637: rkhunter says wrong hash for dpkg and dpkg-query after apt-get dist-upgrade

2011-01-10 Thread Julien Valroff
Le mardi 11 janv. 2011 à 05:23:25 (+), Steinar Bang a écrit :
[...] 
 After the last apt-get dist-upgrade on my debian stable machine I get the 
 following daily emails from rkhunter:
 Warning: The file properties have changed:
  File: /usr/bin/dpkg
  Current hash: d478e79772b78b64cd5161a4d684b8f52f2e7f5e
  Stored hash : 3f790c813fb21d7f9161e9a8586858b4a5d8bb16
  Current inode: 270438Stored inode: 270423
  Current file modification time: 129405
  Stored file modification time : 1288522576
 Warning: The file properties have changed:
  File: /usr/bin/dpkg-query
  Current inode: 270436Stored inode: 270421
  Current file modification time: 129405
  Stored file modification time : 1288522576
[...] 
 -- debconf information:
   rkhunter/apt_autogen: false

Have you run `rkhunter --propupd' after upgrading your system?

You can also disable the file properties check by adding 'attributes hashes'
to the DISABLE_TESTS configuration option in rkhunter.conf.

Cheers,
Julien

-- 
  ,''`.  Julien Valroff ~ jul...@kirya.net ~ jul...@debian.org
 : :' :  Debian Developer  Free software contributor
 `. `'   http://www.kirya.net/
   `-4096R/ E1D8 5796 8214 4687 E416  948C 859F EF67 258E 26B1



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#609637: rkhunter says wrong hash for dpkg and dpkg-query after apt-get dist-upgrade

2011-01-10 Thread Steinar Bang
 Julien Valroff jul...@debian.org:

 Have you run `rkhunter --propupd' after upgrading your system?

No, I haven't, but I will do so now.

Can this be automated as a part of an apt-get dist-upgrade?

 You can also disable the file properties check by adding 'attributes hashes'
 to the DISABLE_TESTS configuration option in rkhunter.conf.

Ok, thanks.  So far I've just been running with the default config.  I
suspect that will be much better than anything I can come up with.



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org