Bug#770242: rkhunter: upgrade/post-install errors

[Dmitry Smirnov]

Package: rkhunter
Version: 1.4.2-0.3
Severity: important

During "Wheezy" to "Jessie" upgrade (1.4.0-1 --> 1.4.2-0.3) I encountered
the following error after when I've chosen to keep currently-installed
version of "/etc/rkhunter.conf":

~~~~
Invalid SCRIPTWHITELIST configuration option: Non-existent pathname: /usr/sbin/prelink
E: Problem executing scripts DPkg::Post-Invoke 'if [ -x /usr/bin/rkhunter ] && grep -qiE '^APT_AUTOGEN=.?(true|yes)' /etc/default/rkhunter; then /usr/share/rkhunter/scripts/rkhupd.sh; fi'
E: Sub-process returned an error code
~~~~

It seems to be due to "SCRIPTWHITELIST=/usr/sbin/prelink" in default
"/etc/rkhunter.conf" installed by rkhunter/1.4.0-1.
I do not have "prelink" installed on my system and I've never changed this particular
configuration option.

I removed "rkhunter" (but did not "purge" it), deleted "/etc/rkhunter.conf"
and tried to install "rkhunter" again:

~~~~
Selecting previously unselected package rkhunter.
(Reading database ... 339181 files and directories currently installed.)
Preparing to unpack .../rkhunter_1.4.2-0.3_all.deb ...
Unpacking rkhunter (1.4.2-0.3) ...
Processing triggers for man-db (2.7.0.2-3) ...
Setting up rkhunter (1.4.2-0.3) ...
grep: /etc/rkhunter.conf: No such file or directory
dpkg: error processing package rkhunter (--configure):
 subprocess installed post-installation script returned error exit status 1
Errors were encountered while processing:
 rkhunter
Unable to find configuration file: /usr/local/etc/rkhunter.conf
E: Sub-process /usr/bin/dpkg returned an error code (1)
E: Problem executing scripts DPkg::Post-Invoke 'if [ -x /usr/bin/rkhunter ] && grep -qiE '^APT_AUTOGEN=.?(true|yes)' /etc/default/rkhunter; then /usr/share/rkhunter/scripts/rkhupd.sh; fi'
E: Sub-process returned an error code
~~~~

Only purging and re-installing "rkhunter" was successful.

I did not dig deeper but it looks like something is broken in postinst
configuration handling...



--- System information. ---
Debian Release: jessie/sid

--- Package information. ---
Depends        (Version) | Installed
========================-+-===========
file                     | 1:5.20-2
net-tools                | 1.60-26+b1
binutils                 | 2.24.90.20141023-1
ucf            (>= 0.28) | 3.0030
perl                     | 5.20.1-2


Recommends                (Version) | Installed
===================================-+-===========
default-mta                         | 
 OR mail-transport-agent            | 
wget                                | 1.13.4-3+deb7u2
 OR curl                            | 7.38.0-3
 OR links                           | 
 OR elinks                          | 
 OR lynx                            | 2.8.9dev1-2
iproute                             | 1:3.16.0-2
unhide.rb                           | 
 OR unhide                          | 20121229-1+b1
lsof                                | 4.86+dfsg-1


Suggests                      (Version) | Installed
=======================================-+-===========
bsd-mailx                               | 8.1.2-0.20140825cvs-1
 OR mailutils                           | 
 OR heirloom-mailx                      | 
 OR mailx                               | 
tripwire                                | 
libdigest-whirlpool-perl                | 
liburi-perl                             | 1.64-1
libwww-perl                             | 6.08-1
powermgmt-base                          | 1.31+nmu1


-- 
All the best,
 Dmitry Smirnov
 GPG key : 4096R/53968D1B
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/forensics-devel/attachments/20141120/855f11a2/attachment.sig>