Bug#765901: rkhunter package should Recommend both unhide AND unhide.rb

Christoph Anton Mitterer calestyo at scientia.net
Sun Oct 19 01:34:00 UTC 2014


Package: rkhunter
Version: 1.4.2-0.1
Severity: normal


Hi.

I think the rkhunter package should Recommend both,
unhide AND unhide.rb, instead of unhide OR unhide.rb.

Reasons:
1) Both do actually different checks, so what the one can find
   may not be found by the other.
   Also rkhunter would per default actually use/run both (see
   also bug #765896).

2) rkhunter uses the unhide-tcp program for the hidden_ports
   check.
   This program is however only part of the C unhide package,
   not of unhide.rb.


Cheers,
Chris.



More information about the forensics-devel mailing list