Summary: | rkhunter 1.2.8 scans error with OS not supported & md5_not_known | ||
---|---|---|---|
Product: | Gentoo Linux | Reporter: | VinnieNZ <spamtrap+gentoo> |
Component: | Current packages | Assignee: | Forensics Herd [disbanded] <forensics+obsolete> |
Status: | RESOLVED UPSTREAM | ||
Severity: | normal | CC: | billie, centic, chris, jabapi, prote, rjm40, sgtphou, sybillel, zak.kipling |
Priority: | High | ||
Version: | 2006.0 | ||
Hardware: | x86 | ||
OS: | Linux | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- |
Description
VinnieNZ
2006-03-27 12:45:19 UTC
I am seeing the same and am wondering if there is any effort going on to get current Gentoo in a "Supported" state. See forum-discussion at http://forums.gentoo.org/viewtopic-t-197663-start-0.html for some information what rkhunter checks in the OS. Adding the following line to the end of /usr/lib/rkhunter/db/os.dat got rid of the "OS unsupported" message: 719:Gentoo Linux 1.12 (i386):/usr/bin/md5sum:/bin: Aaron (ka0ttic) has got really rapid answers from the rkhunter author so getting this patch upstream shouldn't be too hard. The following patch fixes this for me, maybe we can add this until the next version of rkhunter comes out with support for newer versions of Gentoo: diff -u -3 -p -r1.1 rkhunter-1.2.8.ebuild --- rkhunter-1.2.8.ebuild 22 Feb 2006 02:35:06 -0000 1.1 +++ rkhunter-1.2.8.ebuild 23 Apr 2006 15:43:39 -0000 @@ -28,6 +28,9 @@ src_unpack() { } src_install() { + # bug 127783 + echo "719:Gentoo Linux 1.12 (i386):/usr/bin/md5sum:/bin:" >> os.dat + insinto /usr/lib/rkhunter/db doins *.dat || die "failed to install dat files" Be aware, if you run rkhunter with option "--update", it will fetch an updated list from it's homepage and you will loose this change... Seems like we will need to wait until the devs of rkhunter decide to add it in. Please note bug #149951. I've filed a bug for this upstream: https://sourceforge.net/tracker/?func=detail&atid=794187&aid=1572720&group_id=155034 Sounds like it should be fixed very soon. closing this one - upstream fixed this |