Bug#740729: rkhunder cron.daily emit errors: Error: Invalid display - keyword cannot be found: Display line: display --to LOG --type INFO NETWORK_PORTS_DISABLE_PATHS

Dominic Cleal dominic at computerkb.co.uk
Sun Mar 30 16:31:57 UTC 2014

tags 740729 + patch

The issue appears to be that rkhunter is looking up the key
"NETWORK_PORTS_DISABLE_PATHS" in its i18n files when the lsof command
isn't installed, and the builtin "display" function throws this error
for an unknown i18n keyword.

A simple patch to the en i18n file to add this keyword is attached.
This isn't applicable in rkhunter 1.4.2 (hence the author's
recommendation to upgrade I suppose), as the port checks have been
rewritten and no longer report this error condition.

A simple workaround is to install lsof.

Dominic Cleal
dominic at cleal.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: rkhunter-1.4.0-i18n-disable_paths.patch
Type: text/x-patch
Size: 730 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/forensics-devel/attachments/20140330/30e72fb2/attachment.bin>

More information about the forensics-devel mailing list