Bug#765901: rkhunter package should Recommend both unhide AND unhide.rb
Christoph Anton Mitterer
calestyo at scientia.net
Sun Oct 19 01:34:00 UTC 2014
I think the rkhunter package should Recommend both,
unhide AND unhide.rb, instead of unhide OR unhide.rb.
1) Both do actually different checks, so what the one can find
may not be found by the other.
Also rkhunter would per default actually use/run both (see
also bug #765896).
2) rkhunter uses the unhide-tcp program for the hidden_ports
This program is however only part of the C unhide package,
not of unhide.rb.
More information about the forensics-devel