Bug 1731302

Summary:	Installing wp-cli as /usr/bin/wp triggers a false positive from rkhunter
Product:	[Fedora] Fedora EPEL	Reporter:	Richard Siddall <richard.siddall>
Component:	wp-cli	Assignee:	Luis Segundo <luis>
Status:	NEW ---	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	epel7	CC:	luis
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Richard Siddall 2019-07-19 01:38:15 UTC

Description of problem: wp-cli produces false positive in rkhunter


Version-Release number of selected component (if applicable): 2.2.0


How reproducible: reliable


Steps to Reproduce:
1. Install rkhunter from EPEL
2. Run sudo rkhunter --check --enable rootkits

Actual results:
...
RH-Sharpe's Rootkit                                      [ Warning ]
...

Expected results:
...
RH-Sharpe's Rootkit                                      [ Not Found ]
...

Additional info:
rkhunter warns that the RH-Sharpe's Rootkit may be present if a file /usr/bin/wp exists.  Suppressing the test in rkhunter stops it detecting the rootkit, so wp-cli should be installed in another folder on the path.