Rootkit Hunter

Email Archive: rkhunter-users (read-only)

[Rkhunter-users] Warning about /usr/sbin/rkhunter file after gentoo updates...

From: Tanstaafl <tanstaafl@li...> - 2011-09-21 12:27

Hi all,

After a lot of updates on my gentoo system - one of which included a 
REBUILD of rkhunter - and *after* running --propupd, I'm getting the 
following Warning (this is the only one):

[07:40:01]   /usr/sbin/rkhunter                              [ Warning ]
[07:40:01] Warning: The command '/usr/sbin/rkhunter' has been replaced 
and is not a script: /usr/sbin/rkhunter: POSIX shell script, ASCII text 
executable, with very long lines

Is this a gentoo problem that I need to report there? Or is something 
else going on?

Thanks...

Thread View

Thread	Author	Date
[Rkhunter-users] Warning about /usr/sbin/rkhunter file after gentoo updates...	Tanstaafl <tanstaafl@li...>

Re: [Rkhunter-users] Warning about /usr/sbin/rkhunter file after gentoo updates...

From: Helmut Hullen <Hullen@t-...> - 2011-10-17 04:47

Hallo, Tanstaafl,

Du meintest am 21.09.11:

> After a lot of updates on my gentoo system - one of which included a
> REBUILD of rkhunter - and *after* running --propupd, I'm getting the
> following Warning (this is the only one):

> [07:40:01] Warning: The command '/usr/sbin/rkhunter' has
> been replaced and is not a script: /usr/sbin/rkhunter: POSIX shell
> script, ASCII text executable, with very long lines

> Is this a gentoo problem that I need to report there? Or is something
> else going on?

No - it's a wide spread problem. See

   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641217

And in a brandnew slackware installation the problem exists too.

"file-5.07" makes no problems, "file-5.08" and "file-5.09" produce

"Warning: The command '/usr/bin/rkhunter' has been replaced and is not a
script: /usr/bin/rkhunter: POSIX shell script, ASCII text executable"

The path to "rkhunter" may be different.

Viele Gruesse!
Helmut