rkhunter missing

Kevin J. Cummings cummings at kjchome.homeip.net
Thu Nov 16 03:18:07 UTC 2006


hanpingtian at gmail.com wrote:
> But I find the hash checking failed on some programs:
> ......
>   /usr/bin/watch  [ BAD ]
>   /usr/bin/wc  [ BAD ]
>   /usr/bin/wget  [ OK ]
>   /usr/bin/whereis  [ BAD ]
>   /usr/bin/who  [ BAD ]
>   /usr/bin/whoami  [ BAD ]
> --------------------------------------------------------------------------------
> 
> Rootkit Hunter found some bad or unknown hashes. This can be happen due
> replaced
> binaries or updated packages (which give other hashes). Be sure your
> hashes are
> fully updated (rkhunter --update). If you're in doubt about these
> hashes, contact
> the author (fill in the contact form).
> --------------------------------------------------------------------------------
> 
> What does this mean?

This should be fixed by now.  The problem was with the FC support in
rkhunter's database files.  It didn't have the proper FC5 hashes until
recently.  See BZ 189796   This changed sometime between 10/08/06 and
10/20/06.



-- 
Kevin J. Cummings
kjchome at rcn.com
cummings at kjchome.homeip.net
cummings at kjc386.framingham.ma.us
Registered Linux User #1232 (http://counter.li.org)




More information about the users mailing list