Bug 341572

Summary:	rkhunter not recognising 10.3
Product:	[openSUSE] openSUSE 10.3	Reporter:	Peter Lord <peter>
Component:	Security	Assignee:	Lars Vogdt <lars.vogdt>
Status:	RESOLVED FIXED	QA Contact:	E-mail List <qa-bugs>
Severity:	Normal
Priority:	P5 - None	CC:	balazs.melikant, lars.vogdt, meissner, ro
Version:	Final
Target Milestone:	---
Hardware:	Other
OS:	Other
Whiteboard:
Found By:	---	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description Peter Lord 2007-11-14 10:14:35 UTC

When running rkhunter I see :-

Warning: This operating system is not fully supported!
Line: Warning: This operating system is not fully supported!
Warning: Cannot find md5_not_known
Line: Warning: Cannot find md5_not_known

A line needs to be added to /var/lib/rkhunter/db/os.dat to avoid this :-

991:openSUSE 10.3 (X86-64):/usr/bin/md5sum:/bin:

Comment 1 Lars Vogdt 2007-11-28 16:03:17 UTC

Proposed Patch:
--- os.dat.orig
+++ os.dat
@@ -233,3 +233,10 @@
 988:Debian stable (arm):/usr/bin/md5sum:/bin:
 989:Debian stable (powerpc):/usr/bin/md5sum:/bin:
 990:Debian stable (x86_64):/usr/bin/md5sum:/bin:
+1005:SUSE Linux Enterprise Desktop 10 (x86_64):/usr/bin/md5sum:/bin:
+1006:SUSE Linux Enterprise Desktop 10 (i586):/usr/bin/md5sum:/bin:
+1007:SUSE Linux Enterprise Server 10 (i586):/usr/bin/md5sum:/bin:
+1008:SUSE Linux Enterprise Server 10 (x86_64):/usr/bin/md5sum:/bin:
+1012:openSUSE 10.3 (X86-64):/usr/bin/md5sum:/bin:
+1012:openSUSE 10.3 (i586):/usr/bin/md5sum:/bin:
+1012:openSUSE 10.3 (PPC):/usr/bin/md5sum:/bin:

Comment 2 Lars Vogdt 2007-11-28 16:21:32 UTC

*** Bug 344531 has been marked as a duplicate of this bug. ***

Comment 3 Lars Vogdt 2007-11-29 20:50:49 UTC

Found an additional problem: we permit root login over ssh per default. I changed the config, so this produces no warning any more.

I also increased the version in os.dat so this file wouldn't be overwritten if a user runs rkhunter --update (this would otherwise "reopen" this bug again).

Updated package submitted to autobuild.

coolo: should this go out via online-update?

Comment 4 Lars Vogdt 2007-11-30 12:45:18 UTC

*** Bug 276457 has been marked as a duplicate of this bug. ***

Comment 5 Ruediger Oertel 2007-12-04 17:28:36 UTC

package has been submitted to 10.3
please get a SWAMPID and create a patchinfo

Comment 6 Stephan Kulow 2007-12-11 18:18:28 UTC

using bugzilla IDs helps

Comment 7 Anja Stock 2007-12-12 10:45:52 UTC

SWAMPID is 15276

Comment 9 Lars Vogdt 2007-12-13 10:34:20 UTC

Patchinfo submitted.

Comment 10 Anja Stock 2007-12-19 09:00:57 UTC

released