Bug#647493: rkhunter: Please allow deactivation of reports

Alexander Reichle-Schmehl tolimar at debian.org
Thu Nov 3 09:06:49 UTC 2011


Package: rkhunter
Version: 1.3.2-6
Severity: minor
Tags: patch


Hi!

In our setup we use rkhunter on several systems and monitor the results of
the daily runs via our monitoring system.  So, we'd like to disable the
report mails.

However, unsetting MAIL-ON-WARNING in /etc/rkhunter.conf wasn't enough, as
we found out, that mails are also send from the cronjob itselfe (Why, if I
may ask?  Doesn't rkhunter itself already has the mail feature?)

Unsetting REPORT_EMAIL in /etc/cron.daily/rkhunter also didn't solved the
issue for us, as the "| /usr/sbin/sendmail $REPORT_EMAIL" in the cronjob
fails.

However, with the following patch:

-        if [ -s "$OUTFILE" ]; then
+        if [ -s "$OUTFILE" -a -n "$REPORT_EMAIL" ]; then

Report mails can be disabled, while keeping the functionality.


Best regards,
  Alexander


-- System Information:
Debian Release: 5.0.9
  APT prefers oldstable
  APT policy: (500, 'oldstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-xen-686 (SMP w/1 CPU core)
Locale: LANG=de_DE at euro, LC_CTYPE=de_DE at euro (charmap=ISO-8859-15) (ignored: LC_ALL set to de_DE at euro)
Shell: /bin/sh linked to /bin/bash

Versions of packages rkhunter depends on:
ii  binutils            2.18.1~cvs20080103-7 The GNU assembler, linker and bina
ii  debconf [debconf-2. 1.5.24               Debian configuration management sy
ii  file                4.26-1               Determines file type using "magic"
ii  net-tools           1.60-22              The NET-3 networking toolkit
ii  perl                5.10.0-19lenny5      Larry Wall's Practical Extraction 
ii  postfix [mail-trans 2.5.5-1.1+lenny1     High-performance mail transport ag

Versions of packages rkhunter recommends:
ii  curl                     7.18.2-8lenny5  Get a file from an HTTP, HTTPS or 
ii  iproute                  20080725-2      networking and traffic control too
ii  libmd5-perl              2.03-1          backwards-compatible wrapper for D
ii  links                    2.1pre37-1.1    Web browser running in text mode
ii  lynx                     2.8.7dev9-2.1   Text-mode WWW Browser (transitiona
ii  unhide                   20080519-2      Forensic tool to find hidden proce
ii  wget                     1.11.4-2+lenny2 retrieves files from the web

Versions of packages rkhunter suggests:
ii  bsd-mailx          8.1.2-0.20071201cvs-3 A simple mail user agent

-- debconf information:
* rkhunter/apt_autogen: true
* rkhunter/cron_daily_run: true
* rkhunter/cron_db_update: true





More information about the forensics-devel mailing list