Bug 746020

Summary: rpm --verify rkhunter reports issues
Product: [Fedora] Fedora EPEL Reporter: Jim Pirzyk <jim+redhat>
Component: rkhunterAssignee: Kevin Fenzi <kevin>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: unspecified    
Version: el6CC: kevin, manuel.wolfshant
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-12-20 16:01:39 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
Mark two .dat files as %ghost files none

Description Jim Pirzyk 2011-10-13 16:47:59 UTC
Created attachment 528065 [details]
Mark two .dat files as %ghost files

Description of problem:
When doing an 'rpm --verify rkhunter' on a system that regularly runs it, the verify reports issues with 2 .dat files.

Version-Release number of selected component (if applicable):


How reproducible:
always

Steps to Reproduce:
1. Install, configure and use rkhunter
2. rpm --verify rkhunter
3.
  
Actual results:

S.5....T.  c /etc/rkhunter.conf
S.5....T.    /var/lib/rkhunter/db/mirrors.dat
S.5....T.    /var/lib/rkhunter/db/programs_bad.dat

Expected results:

S.5....T.  c /etc/rkhunter.conf

Additional info:

I believe the proper fix is to mark the two files as %ghost in the SPEC file.  Patch attached does just that.

Comment 1 Kevin Fenzi 2011-10-15 23:53:24 UTC
Sure, seems reasonable. I've pushed this in rawhide... 

Not sure it is worth a update on it's own for stable releases, but I can push it out with a few more minor changes. Or if you think it's worth it, feel free to convince me. ;)

Comment 2 Jim Pirzyk 2011-10-15 23:59:27 UTC
Not a problem holding the change till having more to release.

Comment 3 Fedora Update System 2012-10-06 20:22:55 UTC
rkhunter-1.4.0-5.fc18 has been submitted as an update for Fedora 18.
https://admin.fedoraproject.org/updates/rkhunter-1.4.0-5.fc18

Comment 4 Fedora Update System 2012-10-06 20:55:32 UTC
rkhunter-1.4.0-5.fc17 has been submitted as an update for Fedora 17.
https://admin.fedoraproject.org/updates/rkhunter-1.4.0-5.fc17

Comment 5 Fedora Update System 2012-10-07 03:46:26 UTC
Package rkhunter-1.4.0-5.fc18:
* should fix your issue,
* was pushed to the Fedora 18 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing rkhunter-1.4.0-5.fc18'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2012-15573/rkhunter-1.4.0-5.fc18
then log in and leave karma (feedback).

Comment 6 Jim Pirzyk 2012-10-11 00:55:07 UTC
Fix looks good to me:

pirzyk@fedora:/var/lib/rkhunter/db
8>sudo rpm -q --verify rkhunter
S.5....T.  c /etc/rkhunter.conf
pirzyk@fedora:/var/lib/rkhunter/db
9>rpm -q rkhunter
rkhunter-1.4.0-5.fc17.noarch

Thanks

Comment 7 Fedora Update System 2012-12-20 16:01:42 UTC
rkhunter-1.4.0-5.fc18 has been pushed to the Fedora 18 stable repository.  If problems still persist, please make note of it in this bug report.