Devuan bug report logs - #342
rkhunter default config false warning re: systemd

Package: rkhunter; Maintainer for rkhunter is (unknown); Source for rkhunter is src:rkhunter.

Reported by: "Jon C. LeBlanc" <jon.c.j.leblanc@protonmail.com>

Date: Mon, 15 Jul 2019 19:33:01 UTC

Severity: normal

Tags: debian

Done: Mark Hindley <mark@hindley.org.uk>

Full log


Message #5 received at submit@bugs.devuan.org (full text, mbox, reply):

Received: (at submit) by bugs.devuan.org; 15 Jul 2019 19:30:05 +0000
Return-Path: <jon.c.j.leblanc@protonmail.com>
Delivered-To: devuanbugs@dyne.org
Received: from tupac3.dyne.org [195.169.149.119]
	by fulcanelli with IMAP (fetchmail-6.3.26)
	for <debbugs@localhost> (single-drop); Mon, 15 Jul 2019 21:30:05 +0200 (CEST)
Received: from mail2.protonmail.ch (mail2.protonmail.ch [185.70.40.22])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by vm6.ganeti.dyne.org (Postfix) with ESMTPS id 4BF88F60B8F
	for <submit@bugs.devuan.org>; Mon, 15 Jul 2019 21:26:51 +0200 (CEST)
Authentication-Results: vm6.ganeti.dyne.org;
	dkim=pass (1024-bit key; secure) header.d=protonmail.com header.i=@protonmail.com header.b="ln271gSg";
	dkim-atps=neutral
Date: Mon, 15 Jul 2019 19:26:48 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=protonmail.com;
	s=default; t=1563218810;
	bh=UtTWvkSC6UGgsyE7EL+Uvs7zoKIlLE8Ch8O9NFf+GMo=;
	h=Date:To:From:Reply-To:Subject:Feedback-ID:From;
	b=ln271gSghxXkXwYsvSOhpN4DHhEvIXwsRo8vAYuJi8Zk+LEfKApNEhH3alv/I63dT
	 2Gw9vIPXvYhIRrQhQKtZd3Okj0hTcEfIqkD6ypTkylCiFB/LwvFTo4YAdgo2EkOLLB
	 TqbVS7hDH6038RofyFvvDWA51GT7TKc38ykbeko8=
To: "submit@bugs.devuan.org" <submit@bugs.devuan.org>
From: "Jon C. LeBlanc" <jon.c.j.leblanc@protonmail.com>
Reply-To: "Jon C. LeBlanc" <jon.c.j.leblanc@protonmail.com>
Subject: rkhunter default config false warning re: systemd
Message-ID: <8e6jNgVrZBhBCIWHGSjcecGcyozsd4xVIxPBYR65tIUSgtT1ecEFmvROOXYMSH-qZmGgkgNsq0YGdhGsTYAj7TUWy6GGURKTDwwcyrGU5IY=@protonmail.com>
Feedback-ID: JSQraNnUSfeYRg3Q3LcwPyUda5gNgKUVl9MxYiSjW6Vw0m3Ag2tincji4WXNVI8LgVMp25IQhh126Tn8mDWD-w==:Ext:ProtonMail
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="b1_bf04f72a7ac362cd77007066e4d5e62e"
X-Spam-Status: No, score=-0.9 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
	DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,HTML_MESSAGE,
	RCVD_IN_DNSWL_LOW,SPF_HELO_PASS,SPF_PASS autolearn=disabled
	version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on tupac3.dyne.org
[Message part 1 (text/plain, inline)]
Package: Rootkit Hunter 1.4.6
Devuan version: Beowulf
uname -a output: Linux coho 4.19.0-5-amd64 #1 SMP Debian 4.19.37-5 (2019-06-19) x86_64 GNU/Linux

The rkhunter package's default /etc/rkhunter.conf configuration generates a warning when it cannot find systemd, so could you please add the following to the default /etc/rkhunter.conf file:

RTKT_FILE_WHITELIST=/var/run/udev.pid

After adding that line the warning is eliminated, but there is a second config entry that does not pass the 'rkhunter -C' configuration file self-check:

DISABLE_UNHIDE=1

When I commented that line the warning went away. I have not debugged that warning so I don't know what it is about.

Thanks!
[Message part 2 (text/html, inline)]

Send a report that this bug log contains spam.


Devuan BTS -- Powered by Debian bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.

Devuan Bugs Owner <owner@bugs.devuan.org>.
Last modified: Sun Nov 24 03:02:24 2024;