[Bug 1940851] Re: False positive: "running_procs" incorrectly reports libkeyutils.so.1.9 as "Spam tool component"

I'm having the same kind of problem on a host that has postgres running inside a docker container. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1940851 Title: False positive: "running_procs"

[Bug 1940851] Re: False positive: "running_procs" incorrectly reports libkeyutils.so.1.9 as "Spam tool component"

Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: rkhunter (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1940851 Title:

[Bug 1940851] Re: False positive: "running_procs" incorrectly reports libkeyutils.so.1.9 as "Spam tool component"

According to some reports, this ought to help: RTKT_FILE_WHITELIST=/usr/lib/x86_64-linux-gnu/libkeyutils.so.1.9 However, in our use case the file in question does not exist on the host system, only inside the containers, so this yields me "Invalid RTKT_FILE_WHITELIST configuration option:

[Bug 1940851] Re: False positive: "running_procs" incorrectly reports libkeyutils.so.1.9 as "Spam tool component"

Fixed in Debian, see https://bugs.debian.org/cgi- bin/bugreport.cgi?bug=951366 ** Bug watch added: Debian Bug tracker #951366 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=951366 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.