Your message dated Sat, 14 May 2011 21:06:48 +
with message-id e1qlm2y-0002by...@franck.debian.org
and subject line Bug#626643: fixed in rkhunter 1.3.8-6
has caused the Debian Bug report #626643,
regarding rkhunter: Multiple ALLOWPROCDELFILE options not working anymore
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
626643: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626643
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: rkhunter
Version: 1.3.8-4
Severity: normal
Among other things, when the daily cronjob runs, I get the following
processes with open deleted files:
Process: /usr/bin/kdeinit4PID: 599File: /dev/pts/2
Process: /usr/bin/gnome-terminalPID: 4971File: /tmp/vteLAK4UV
If I put this in my /etc/rkhunter.conf.local:
ALLOWPROCDELFILE=/usr/bin/kdeinit4
then the first one disappears and I'm left with:
Process: /usr/bin/gnome-terminalPID: 4971File: /tmp/vteLAK4UV
However, if I put this in my /etc/rkhunter.conf.local:
ALLOWPROCDELFILE=/usr/bin/kdeinit4
ALLOWPROCDELFILE=/usr/bin/gnome-terminal
then none of them are filtered and I'm left with the original two:
Process: /usr/bin/kdeinit4PID: 599File: /dev/pts/2
Process: /usr/bin/gnome-terminalPID: 4971File: /tmp/vteLAK4UV
the same problem exists if I merge the two options into a single option:
ALLOWPROCDELFILE=/usr/bin/kdeinit4 /usr/bin/gnome-terminal
Cheers,
Francois
-- System Information:
Debian Release: wheezy/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.38.6-grsec+ (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=fr_CA.utf8, LC_CTYPE=fr_CA.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages rkhunter depends on:
ii binutils 2.21.51.20110421-3 The GNU assembler, linker and bina
ii debconf [debconf-2.0] 1.5.39 Debian configuration management sy
ii file 5.04-5+b1 Determines file type using magic
ii net-tools 1.60-23The NET-3 networking toolkit
ii perl 5.10.1-20 Larry Wall's Practical Extraction
ii ucf 3.0025+nmu2Update Configuration File: preserv
Versions of packages rkhunter recommends:
ii curl 7.21.6-1 Get a file from an HTTP, HTTPS or
ii iproute20110315-1networking and traffic control too
ii lsof 4.81.dfsg.1-1 List open files
ii postfix [mail-transport-ag 2.8.3-1 High-performance mail transport ag
pn unhide none(no description available)
pn unhide.rb none(no description available)
ii wget 1.12-3.1 retrieves files from the web
Versions of packages rkhunter suggests:
ii libdigest-sha1-perl 2.13-1 NIST SHA-1 message digest algorith
pn libdigest-whirlpool-per none (no description available)
ii liburi-perl 1.58-1 module to manipulate and access UR
ii libwww-perl 6.01-3 simple and consistent interface to
ii mailutils [mailx] 1:2.2+dfsg1-3+b1 GNU mailutils utilities for handli
ii powermgmt-base 1.31 Common utils and configs for power
pn tripwirenone (no description available)
-- Configuration Files:
/etc/cron.daily/rkhunter changed [not included]
/etc/default/rkhunter changed [not included]
-- debconf information:
* rkhunter/apt_autogen: yes
* rkhunter/cron_daily_run: yes
* rkhunter/cron_db_update: yes
---End Message---
---BeginMessage---
Source: rkhunter
Source-Version: 1.3.8-6
We believe that the bug you reported is fixed in the latest version of
rkhunter, which is due to be installed in the Debian FTP archive:
rkhunter_1.3.8-6.debian.tar.gz
to main/r/rkhunter/rkhunter_1.3.8-6.debian.tar.gz
rkhunter_1.3.8-6.dsc
to main/r/rkhunter/rkhunter_1.3.8-6.dsc
rkhunter_1.3.8-6_all.deb
to main/r/rkhunter/rkhunter_1.3.8-6_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 626...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Julien Valroff jul...@debian.org (supplier of updated rkhunter package)
(This message was generated automatically at their request; if you
believe that there is a problem with it
