If lsof is missing an obscure warning is displayed
Brought to you by:
dogsbody,
dogsbodymark
If I run "rkhunter --cronjob" and lsof is missing, the following is displayed:
Performing checks on the network ports
Error: Invalid display - keyword cannot be found: Display line: display --to LOG --type INFO NETWORK_PORTS_DISABLE_PATHS
This bug was particularly nasty to figure out because the error message bears very little relation to the actual cause. It seems that the string NETWORK_PORTS_DISABLE_PATHS is not included in the English language file, but is in some others (e.g. German). Adding the string should fix this error.
Rkhunter version I use is 1.4.0.
If you have run RKH with the '--update' option then it is possible that your en file has been overwritten by the current release of the file (which does not contain network_ports_disable_paths). The string was removed from the latest RKH version (it was no longer required). As such, it will not be added back in.