I've applied the same patch to the rkhunter that ships with precise (1.38), in
case you don't want to jump versions.
Package is available in my PPA: https://launchpad.net/~elmuerte/+archive/12.04
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed
@kholler -- 2013-01-01
Thanks to you and your 'ppa' with rkhunter-1.4.x. The new ver. 'fixed' this
bug for me on two recently built 12.04 servers.
.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
I read on https://wiki.ubuntu.com/UbuntuBackports about the backporting process
and created https://bugs.launchpad.net/precise-backports/+bug/1095056 via
requestbackport rkhunter --destination precise after having tested that the
rkhunter-1.4.0-2 package from raring builds and runs fine for
I still have the same problem, it has been reported several months ago
and the fix is known and is easy to implement, why don't you just fix
the package?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
Quantal - still there.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/883324
Title:
False positive: Hidden file (symbolic link to directory) cannot be
white-listed
To manage notifications about
I have added a backport of the latest version from Debian sid (rkhunter
1.4.0-1) to my PPA:
https://launchpad.net/~fmarier/+archive/ppa
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/883324
Title:
Just copying the executable wasn't enough on my systems. I recommend
also copying the 1.4.0 file rkhunter.conf to /etc. After that, create a
new file /etc/rkhunter.conf.local and populate it with ALL the different
(uncommented) lines from your old 1.3.8 rkhunter.conf.
In my opinion, whoever does
Ran into this also. Thanks to reinhold for pointing to the patch.
I am just using the stock Ubuntu 12.04 version with the patch manually
applied. That is working fine for me in terms of avoiding the false
positive.
vi /usr/bin/rkhunter
At around line 846 and following
...
downloading the tarfile rkhunter-1.4.0.tar.gz from
http://sourceforge.net/projects/rkhunter/files/ and just copying the
files/rkhunter script from the tarfile over /usr/bin/rkhunter seems to
be fine as workaround - the false positive is gone.
--
You received this bug notification because you are
NEW DISTRIBUTION, AND OLD BUG! :-)
In the version of rkhunter 1.3.8-10 that distributed with Ubuntu 12.04
LTS this bug is present again. The patch is in CVS RKhunter since Agoust
2011 and related URL is in another comment of this bug
Who is the maintainer of this package in Ubuntu ?¿?¿
According to https://launchpad.net/ubuntu/+source/rkhunter, the Debian
Forensics team (https://launchpad.net/~forensics-devel) which, apparently,
does not use Launchpad...
(IOW, there doesn't seem to be anyone in Ubuntu claiming
Awesome!!
I'll search a package ported to Ubuntu from a higher version included in
Precise (1.4.0 I hope) .. :(
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/883324
Title:
False positive:
** Tags added: precise
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/883324
Title:
False positive: Hidden file (symbolic link to directory) cannot be
white-listed
To manage notifications about
+1. Please backport!
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/883324
Title:
False positive: Hidden file (symbolic link to directory) cannot be
white-listed
To manage notifications about
version 1.3.8-10 from the precise pangolin beta repository has the same
problem (symlink to /run/initramfs) as reported against the oneiric
1.3.8-7 package.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
This is still the case on precise which is still using rkhunter 1.3.8.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/883324
Title:
False positive: Hidden file (symbolic link to directory) cannot be
Getting the false positive every morning (as reinhold and Robby point
out) is not only annoying but increases the risk of ignoring a real
problem: the security software that cried wolf. Please backport the
upstream fix to oneiric.
--
You received this bug notification because you are a member
+1 for a backport to oneiric. Getting emails from all of my machines
with this error is highly annoying...
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/883324
Title:
False positive: Hidden file
Can't the ubuntu maintainers simply backport that patch to the oneiric version?
It's a simple fix, and the ubuntu packages seem to backport fixes regularly, so
why not here, too?
http://rkhunter.cvs.sourceforge.net/viewvc/rkhunter/rkhunter/files/rkhunter?r1=1.405r2=1.406sortby=date
Right now,
** Tags added: oneiric
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/883324
Title:
False positive: Hidden file (symbolic link to directory) cannot be
white-listed
To manage notifications about
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: rkhunter (Ubuntu)
Status: New = Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/883324
Title:
21 matches
Mail list logo
