Bug#791486: /usr/bin/rkhunter: 7439: [: Binary: unexpected operator

Craig Small csmall at debian.org
Sat Aug 8 22:17:50 UTC 2015


Package: rkhunter
Version: 1.4.2-3
Followup-For: Bug #791486

It's not actually the version check, it is how the verison is extracted
by the program. Looking in the logs:

[08:06:10] Info: This version  : Binary file /var/lib/rkhunter/db/i18n/zh matches                                                                               
[08:06:10] Info: Latest version: 2009091601

That looks like a grep message, grep is unhappy :(

# grep 'Version:' /var/lib/rkhunter/db/i18n/zh
Binary file /var/lib/rkhunter/db/i18n/zh matches
# LANG=C grep 'Version:' /var/lib/rkhunter/db/i18n/zh
Version:2009091601

I'm not sure where GREP_OPT is used elsewhere, so the fix is either:
Line 18470:
GREP_OPT="-a"

or line 7419:
Add -a after GREP_OPT


-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.0.0-2-amd64 (SMP w/6 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages rkhunter depends on:
ii  binutils               2.25-10
ii  debconf [debconf-2.0]  1.5.57
ii  file                   1:5.22+15-2
ii  lsof                   4.86+dfsg-1
ii  net-tools              1.60-26+b1
ii  perl                   5.20.2-6
ii  ucf                    3.0030

Versions of packages rkhunter recommends:
ii  bsd-mailx [mailx]               8.1.2-0.20150408cvs-1
ii  curl                            7.43.0-1
ii  iproute2                        4.0.0-1
ii  postfix [mail-transport-agent]  2.11.3-1
ii  unhide                          20121229-1+b1
ii  unhide.rb                       22-1
ii  wget                            1.16.3-3

Versions of packages rkhunter suggests:
ii  liburi-perl     1.64-1
ii  libwww-perl     6.13-1
ii  powermgmt-base  1.31+nmu1

-- Configuration Files:
/etc/logcheck/ignore.d.server/rkhunter [Errno 13] Permission denied: u'/etc/logcheck/ignore.d.server/rkhunter'
/etc/rkhunter.conf changed [not included]

-- debconf information excluded



More information about the forensics-devel mailing list