On 2020-05-26 at 17:00:03, Christoph Anton Mitterer wrote:
> The symlink /bin/which to /usr/bin/which was removed.
>
> Please adapt the template config to use /usr/bin/which .
I think that it was already done in order to fix #931396:
https://salsa.debian.org/pkg-security-team/rkhunter/-/commit/8bd8128fb3cb9f9a5d8e2493297b63d44fc65204
Maybe you don't have the latest copy of the config file on your system?
On my machine, I see this:
$ grep /bin/which /etc/rkhunter.conf
SCRIPTWHITELIST=/usr/bin/which
Francois
--
https://fmarier.org/