Bug 1731302

Summary:	Installing wp-cli as /usr/bin/wp triggers a false positive from rkhunter
Product:	[Fedora] Fedora EPEL	Reporter:	Richard Siddall <richard.siddall>
Component:	wp-cli	Assignee:	Jonathan Wright <jonathan>
Status:	CLOSED EOL	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	epel7	CC:	luis
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2024-07-09 02:53:53 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Richard Siddall 2019-07-19 01:38:15 UTC

Description of problem: wp-cli produces false positive in rkhunter


Version-Release number of selected component (if applicable): 2.2.0


How reproducible: reliable


Steps to Reproduce:
1. Install rkhunter from EPEL
2. Run sudo rkhunter --check --enable rootkits

Actual results:
...
RH-Sharpe's Rootkit                                      [ Warning ]
...

Expected results:
...
RH-Sharpe's Rootkit                                      [ Not Found ]
...

Additional info:
rkhunter warns that the RH-Sharpe's Rootkit may be present if a file /usr/bin/wp exists.  Suppressing the test in rkhunter stops it detecting the rootkit, so wp-cli should be installed in another folder on the path.

Comment 1 Fedora Admin user for bugzilla script actions 2024-05-17 00:33:21 UTC

This package has changed maintainer in Fedora. Reassigning to the new maintainer of this component.

Comment 2 Fedora Admin user for bugzilla script actions 2024-05-17 12:38:34 UTC

This package has changed maintainer in Fedora. Reassigning to the new maintainer of this component.

Comment 3 Troy Dawson 2024-07-09 02:53:53 UTC

EPEL 7 entered end-of-life (EOL) status on 2024-06-30.\n\nEPEL 7 is no longer maintained, which means that it\nwill not receive any further security or bug fix updates.\n As a result we are closing this bug.