Bug#765901: rkhunter package should Recommend both unhide AND unhide.rb
Christoph Anton Mitterer
calestyo at scientia.net
Sun Oct 19 01:34:00 UTC 2014
Package: rkhunter
Version: 1.4.2-0.1
Severity: normal
Hi.
I think the rkhunter package should Recommend both,
unhide AND unhide.rb, instead of unhide OR unhide.rb.
Reasons:
1) Both do actually different checks, so what the one can find
may not be found by the other.
Also rkhunter would per default actually use/run both (see
also bug #765896).
2) rkhunter uses the unhide-tcp program for the hidden_ports
check.
This program is however only part of the C unhide package,
not of unhide.rb.
Cheers,
Chris.
More information about the forensics-devel
mailing list