Bug 1291629

Summary: Hidden file found: /etc/.updated: ASCII text
Product: [Fedora] Fedora EPEL Reporter: Nerijus Baliūnas <nerijus>
Component: rkhunterAssignee: Mukundan Ragavan <nonamedotc>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: epel7CC: kevin, manuel.wolfshant, nonamedotc, redhat
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: rkhunter-1.4.2-7.el7 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-01-24 01:06:12 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Nerijus Baliūnas 2015-12-15 10:32:54 UTC
After CentOS 7.1->7.2 upgrade there is a new warning:
Warning: Hidden file found: /etc/.updated: ASCII text

Fedora /etc/rkhunter.conf already has 
ALLOWHIDDENFILE=/etc/.updated

See bug 1288450

Comment 1 Mukundan Ragavan 2015-12-15 11:31:06 UTC
Fair enough. I will push an update after taking a look.

Thanks for reporting this.

Comment 2 Mukundan Ragavan 2015-12-22 02:56:53 UTC
Here is *a* scratch build to take a look at this.

https://koji.fedoraproject.org/koji/taskinfo?taskID=12276725


Please be advised that I have just merged the the fedora config patch with epel7 branch. I am going through the configs to make sure that they match EL7 as well. If you can test as well and report back,I will build it "officially" and submit an update.

Comment 3 Nerijus Baliūnas 2015-12-22 10:58:57 UTC
I get no more warning about hidden files and directories, but I get a new one:
  Checking if SSH root access is allowed          [ Warning ]
Warning: The SSH configuration option 'PermitRootLogin' has not been set.
The default value may be 'yes', to allow root access.

It seems the first change is not needed:
--- rkhunter.conf.!	2014-10-27 17:54:24.000000000 +0200
+++ rkhunter.conf	2015-12-22 04:53:35.000000000 +0200
@@ -307,7 +307,7 @@
 # The default value is 'no'.
 #
 #ALLOW_SSH_ROOT_USER=no
-ALLOW_SSH_ROOT_USER=unset
+ALLOW_SSH_ROOT_USER=yes
 
 #
 # Set this option to '1' to allow the use of the SSH-1 protocol, but note

Comment 4 Mukundan Ragavan 2015-12-23 01:36:16 UTC
ok cool! I saw ssh value only as well. I will push this as update after correcting for ssh.

Thanks for testing.

Comment 5 Fedora Update System 2016-01-01 00:29:59 UTC
rkhunter-1.4.2-6.el7 has been submitted as an update to Fedora EPEL 7. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-18897f65c0

Comment 6 Fedora Update System 2016-01-03 02:51:26 UTC
rkhunter-1.4.2-6.el7 has been pushed to the Fedora EPEL 7 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-18897f65c0

Comment 7 Nerijus Baliūnas 2016-01-05 08:00:37 UTC
Unfortunately instead of adding back "ALLOW_SSH_ROOT_USER=unset" as I wrote in Comment 3 rkhunter-1.4.2-6.el7 has no ALLOW_SSH_ROOT_USER at all. Because of this I get this warning:

Warning: The SSH configuration option 'PermitRootLogin' has not been set.
         The default value may be 'yes', to allow root access.

Could you please put back ALLOW_SSH_ROOT_USER=unset to rkhunter.conf?

Comment 8 Mukundan Ragavan 2016-01-05 23:39:55 UTC
Rats! My apologies. :(

Will be fixed and updated tonight ...

Comment 9 Fedora Update System 2016-01-06 03:33:21 UTC
rkhunter-1.4.2-7.el7 has been submitted as an update to Fedora EPEL 7. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-18897f65c0

Comment 10 Fedora Update System 2016-01-07 03:51:28 UTC
rkhunter-1.4.2-7.el7 has been pushed to the Fedora EPEL 7 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-18897f65c0

Comment 11 Fedora Update System 2016-01-24 01:06:09 UTC
rkhunter-1.4.2-7.el7 has been pushed to the Fedora EPEL 7 stable repository. If problems still persist, please make note of it in this bug report.