#18 support for AMD64

main
closed
unSpawn
5
2007-01-15
2007-01-15
Tomas Davidek
No

On the amd64 machines (running Debian Linux 4.0, etch), rkhunter complaints about not fully supported OS (all MD5 checks will be skipped), even if libmd5 is properly installed. ALl other checks are performed. On the i386 machines running the same version of Debian Linux, everything works well. Can we have also support for 64-bit architectures ?

Discussion

  • Tomas Davidek
    Tomas Davidek
    2007-01-15

    initial part of strace rkhunter -c

     
    Attachments
  • unSpawn
    unSpawn
    2007-01-15

    Logged In: YES
    user_id=600864
    Originator: NO

    Thanks for showing your support for Rootkit Hunter (RKH).
    However:
    - RKH does not have "libmd5" as dependency (the tools it use may, but I never came across that one lib).
    - RKH is not a binary application so we need the rkhunter.log.
    - If debugging info is needed we would like output from "sh -x /path/to/rkhunter --flags-you-use > /path/to/logfile 2>&1".

    Since it works on IA386/Etch I suppose it's something to do with the releasefile. While we're moving fast towards a new release in which all of this won't be happening anymore, for the time being I'll still like to have a look. Please attach the "/etc/debian_version" and rkhunter.log from an AMD64 machine.
    Thanks in advance.

    Cheers, unSpawn

     
  • unSpawn
    unSpawn
    2007-01-15

    • assigned_to: nobody --> unspawn
     
  • Tomas Davidek
    Tomas Davidek
    2007-01-15

    Logged In: YES
    user_id=1692299
    Originator: YES

    Ok, here are the requested files.
    File Added: rkhunter.log

     
  • Tomas Davidek
    Tomas Davidek
    2007-01-15

    rkhunter.log

     
    Attachments
  • Tomas Davidek
    Tomas Davidek
    2007-01-15

    Logged In: YES
    user_id=1692299
    Originator: YES

    Sorry, I cannot attach /etc/debian_version (upload system complaints that files must be > 20 B), its content is just:
    4.0
    (length is only 4 B)

     
  • unSpawn
    unSpawn
    2007-01-15

    • status: open --> closed
     
  • unSpawn
    unSpawn
    2007-01-15

    Logged In: YES
    user_id=600864
    Originator: NO

    > Info: Full OS name = Debian 4.0 (x86_64)
    Ah, OK, I see (wasn't thinking clearly I guess). See the FAQ for running "hashupd". Running hashupd will add an entry "Debian 4.0 (x86_64)" to your os.dat and the local hashes to defaulthashes.dat.

    Cheers, unSpawn