Bug#804543: rkhunter: unhide.rb moved to new pathname, and the whitelist entry should be adapted

[Eriberto]

Thanks for your message Christoph.

I am adding Francois in Cc.

I suggested (as sponsor) to Giovani to move the unhide.rb from
/usr/bin to /usr/sbin, because to get a full reply from the OS, you
need some privileges. Other fact is the upstream manpage is level 8,
signaling this situation. Also, the unhide (other package) is at
/usr/sbin.

Francois, can you update the SCRIPTWHITELIST entry? Do you agree with my POV?

Thanks guys!

Cheers,

Eriberto




2015-11-09 11:30 GMT-02:00 Christoph Anton Mitterer <calestyo at scientia.net>:
> Package: rkhunter
> Version: 1.4.2-4
> Severity: normal
>
>
> Hi.
>
> Apparently unhide.rb moved from /usr/bin to /usr/sbin, even though
> its changelog doesn't tell this (CCing Giovani therefore, so he
> can tell whether this is permanent or just by accident).
>
> Therefore rkhunter's previous SCRIPTWHITELIST entry won't work
> anymore and should be adapted.
>
>
> Cheers,
> Chris.
>
> _______________________________________________
> forensics-devel mailing list
> forensics-devel at lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/forensics-devel