Bug 1731302

Summary: Installing wp-cli as /usr/bin/wp triggers a false positive from rkhunter
Product: [Fedora] Fedora EPEL Reporter: Richard Siddall <richard.siddall>
Component: wp-cliAssignee: Luis Segundo <luis>
Status: NEW --- QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: epel7CC: luis
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Richard Siddall 2019-07-19 01:38:15 UTC
Description of problem: wp-cli produces false positive in rkhunter

Version-Release number of selected component (if applicable): 2.2.0

How reproducible: reliable

Steps to Reproduce:
1. Install rkhunter from EPEL
2. Run sudo rkhunter --check --enable rootkits

Actual results:
RH-Sharpe's Rootkit                                      [ Warning ]

Expected results:
RH-Sharpe's Rootkit                                      [ Not Found ]

Additional info:
rkhunter warns that the RH-Sharpe's Rootkit may be present if a file /usr/bin/wp exists.  Suppressing the test in rkhunter stops it detecting the rootkit, so wp-cli should be installed in another folder on the path.