Bug#765901: rkhunter package should Recommend both unhide AND unhide.rb

Christoph Anton Mitterer calestyo at scientia.net
Sun Oct 19 01:34:00 UTC 2014

Package: rkhunter
Version: 1.4.2-0.1
Severity: normal


I think the rkhunter package should Recommend both,
unhide AND unhide.rb, instead of unhide OR unhide.rb.

1) Both do actually different checks, so what the one can find
   may not be found by the other.
   Also rkhunter would per default actually use/run both (see
   also bug #765896).

2) rkhunter uses the unhide-tcp program for the hidden_ports
   This program is however only part of the C unhide package,
   not of unhide.rb.


More information about the forensics-devel mailing list