rkhunter 1.4 different results than version before?

Posted by dschinn1001 on Ask Ubuntu See other posts from Ask Ubuntu or by dschinn1001
Published on 2012-11-28T10:55:37Z Indexed on 2012/11/28 11:17 UTC
Read the original article Hit count: 433

Filed under:

with rkhunter version before ubuntu-update from 12.04 to 12.10 I had NOT these warnings like listed here:

Performing file properties checks Checking for prerequisites [ Warning ]

/usr/sbin/adduser                                        [ Warning ]

/usr/sbin/chroot                                         [ Warning ]

/usr/sbin/cron                                           [ Warning ]

/usr/sbin/groupadd                                       [ Warning ]

/usr/sbin/groupdel                                       [ Warning ]

/usr/sbin/groupmod                                       [ Warning ]

/usr/sbin/grpck                                          [ Warning ]

/usr/sbin/nologin                                        [ Warning ]

/usr/sbin/pwck                                           [ Warning ]

/usr/sbin/rsyslogd                                       [ Warning ]

/usr/sbin/tcpd                                           [ Warning ]

/usr/sbin/useradd                                        [ Warning ]

/usr/sbin/userdel                                        [ Warning ]

/usr/sbin/usermod                                        [ Warning ]

/usr/sbin/vipw                                           [ Warning ]

/usr/bin/awk                                             [ Warning ]

/usr/bin/basename                                        [ Warning ]

/usr/bin/chattr                                          [ Warning ]

/usr/bin/curl                                            [ Warning ]

/usr/bin/cut                                             [ Warning ]

/usr/bin/diff                                            [ Warning ]

/usr/bin/dirname                                         [ Warning ]

/usr/bin/dpkg                                            [ Warning ]

/usr/bin/dpkg-query                                      [ Warning ]

/usr/bin/du                                              [ Warning ]

/usr/bin/env                                             [ Warning ]

/usr/bin/file                                            [ Warning ]

/usr/bin/find                                            [ Warning ]

/usr/bin/GET                                             [ Warning ]

/usr/bin/groups                                          [ Warning ]

/usr/bin/head                                            [ Warning ]

/usr/bin/id                                              [ Warning ]

/usr/bin/killall                                         [ Warning ]

/usr/bin/last                                            [ Warning ]

/usr/bin/lastlog                                         [ Warning ]

/usr/bin/ldd                                             [ Warning ]

/usr/bin/less                                            [ Warning ]

/usr/bin/locate                                          [ Warning ]

/usr/bin/logger                                          [ Warning ]

/usr/bin/lsattr                                          [ Warning ]

/usr/bin/lsof                                            [ Warning ]

/usr/bin/lynx                                            [ Warning ]

/usr/bin/mail                                            [ Warning ]

/usr/bin/md5sum                                          [ Warning ]

/usr/bin/mlocate                                         [ Warning ]

/usr/bin/newgrp                                          [ Warning ]

/usr/bin/passwd                                          [ Warning ]

/usr/bin/perl                                            [ Warning ]

/usr/bin/pgrep                                           [ Warning ]

/usr/bin/pkill                                           [ Warning ]

/usr/bin/pstree                                          [ Warning ]

/usr/bin/rkhunter                                        [ Warning ]

/usr/bin/rpm                                             [ Warning ]

/usr/bin/runcon                                          [ Warning ]

/usr/bin/sha1sum                                         [ Warning ]

/usr/bin/sha224sum                                       [ Warning ]

/usr/bin/sha256sum                                       [ Warning ]

/usr/bin/sha384sum                                       [ Warning ]

/usr/bin/sha512sum                                       [ Warning ]

/usr/bin/size                                            [ Warning ]

/usr/bin/sort                                            [ Warning ]

/usr/bin/stat                                            [ Warning ]

/usr/bin/strace                                          [ Warning ]

/usr/bin/strings                                         [ Warning ]

/usr/bin/sudo                                            [ Warning ]

/usr/bin/tail                                            [ Warning ]

/usr/bin/test                                            [ Warning ]

/usr/bin/top                                             [ Warning ]

/usr/bin/touch                                           [ Warning ]

/usr/bin/tr                                              [ Warning ]

/usr/bin/uniq                                            [ Warning ]

/usr/bin/users                                           [ Warning ]

/usr/bin/vmstat                                          [ Warning ]

/usr/bin/w                                               [ Warning ]

/usr/bin/watch                                           [ Warning ]

/usr/bin/wc                                              [ Warning ]

/usr/bin/wget                                            [ Warning ]

/usr/bin/whatis                                          [ Warning ]

/usr/bin/whereis                                         [ Warning ]

/usr/bin/which                                           [ Warning ]

/usr/bin/who                                             [ Warning ]

/usr/bin/whoami                                          [ Warning ]

/usr/bin/unhide.rb                                       [ Warning ]

/usr/bin/gawk                                            [ Warning ]

/usr/bin/lwp-request                                     [ Warning ]

/usr/bin/heirloom-mailx                                  [ Warning ]

/usr/bin/w.procps                                        [ Warning ]

/sbin/depmod                                             [ Warning ]

/sbin/fsck                                               [ Warning ]

/sbin/ifconfig                                           [ Warning ]

/sbin/ifdown                                             [ Warning ]

/sbin/ifup                                               [ Warning ]

/sbin/init                                               [ Warning ]

/sbin/insmod                                             [ Warning ]

/sbin/ip                                                 [ Warning ]

/sbin/lsmod                                              [ Warning ]

/sbin/modinfo                                            [ Warning ]

/sbin/modprobe                                           [ Warning ]

/sbin/rmmod                                              [ Warning ]

/sbin/route                                              [ Warning ]

/sbin/runlevel                                           [ Warning ]

/sbin/sulogin                                            [ Warning ]

/sbin/sysctl                                             [ Warning ]

/bin/bash                                                [ Warning ]

/bin/cat                                                 [ Warning ]

/bin/chmod                                               [ Warning ]

/bin/chown                                               [ Warning ]

/bin/cp                                                  [ Warning ]

/bin/date                                                [ Warning ]

/bin/df                                                  [ Warning ]

/bin/dmesg                                               [ Warning ]

/bin/echo                                                [ Warning ]

/bin/ed                                                  [ Warning ]

/bin/egrep                                               [ Warning ]

/bin/fgrep                                               [ Warning ]

/bin/fuser                                               [ Warning ]

/bin/grep                                                [ Warning ]

/bin/ip                                                  [ Warning ]

/bin/kill                                                [ Warning ]

/bin/less                                                [ Warning ]

/bin/login                                               [ Warning ]

/bin/ls                                                  [ Warning ]

/bin/lsmod                                               [ Warning ]

/bin/mktemp                                              [ Warning ]

/bin/more                                                [ Warning ]

/bin/mount                                               [ Warning ]

/bin/mv                                                  [ Warning ]

/bin/netstat                                             [ Warning ]

/bin/ping                                                [ Warning ]

/bin/ps                                                  [ Warning ]

/bin/pwd                                                 [ Warning ]

/bin/readlink                                            [ Warning ]

/bin/sed                                                 [ Warning ]

/bin/sh                                                  [ Warning ]

/bin/su                                                  [ Warning ]

/bin/touch                                               [ Warning ]

/bin/uname                                               [ Warning ]

/bin/which                                               [ Warning ]

/bin/dash                                                [ Warning ]

It seems that rkhunter 1.4 is oversensitive somehow about changed bin-files ? chkrootkit finds nothing and no warnings too.

© Ask Ubuntu or respective owner

Related posts about rkhunter