SCIENTIFIC-LINUX-USERS Archives

July 2017

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
"David G. Miller" <[log in to unmask]>
Reply To:
David G. Miller
Date:
Wed, 26 Jul 2017 18:54:46 -0600
Content-Type:
text/plain
Parts/Attachments:
text/plain (67 lines)
Thanks!  That worked.  Now why wasn't that included in the %post script 
of the 1.4.4-1 rpm?

Cheers,
Dave

On 07/24/2017 12:15 AM, Iosif Fettich wrote:
> Hi,
>
> we faced a similar problem, but checking 
> /var/log/rkhunter/rkhunter.log showed the real issue.
>
> We're using prelinking, which apparently relies on SHA1 checksums.
> The new rkhunter comes with SHA256 default hashing.
>
> # echo "HASH_CMD=sha1sum" >> /etc/rkhunter.conf.local
>
> solved the problem. That was on a CentOS server, but maybe it's 
> relevant even so.
>
> Best regards,
>
> Iosif Fettich
>
>
>
>
> On Sun, 23 Jul 2017, David G. Miller wrote:
>
>> On 07/22/2017 04:47 AM, Alec Habig wrote:
>>> David G. Miller writes:
>>>> Warning: The file '/usr/bin/ipcs' exists on the system, but it
>>>> is not present in the 'rkhunter.dat' file.
>>> I think this is the relevant bit.  Looks to me like the updated 
>>> rkhunter
>>> changed how it cares about ipcs to resolve this localization bug bug
>>> against the 1.4.2 version:
>>>
>>> https://sourceforge.net/p/rkhunter/mailman/message/32127754/
>>>
>>> Since the last time you did a "--propupd" to set up the DB of what your
>>> system's "OK" state was with with the old bugged cersion, the daily
>>> check complains (in a less than informative fashion).
>>>
>>> I just satisfied myself that ipcs was an ok copy and did a --propupd,
>>> and now the rkhunter cron job is happy.
>>>
>> The -propupd helped with the ipcs file problem but didn't fix the 
>> "missing" hashes.  1.4.4-1 continues to complain that they're missing 
>> and 1.4.2 is happy with no changes to the system other than reverting 
>> to rkhunter-1.4.2-8.
>>
>> Cheers,
>> Dave
>>
>> -- 
>> "They that can give up essential liberty to obtain a little temporary 
>> safety deserve neither safety nor liberty."
>>
>> -- Benjamin Franklin
>>

-- 
"They that can give up essential liberty to obtain a little temporary safety deserve neither safety nor liberty."

-- Benjamin Franklin

ATOM RSS1 RSS2