Description of problem: Warning: Hidden file found: /usr/bin/.fipscheck.hmac Version-Release number of selected component (if applicable): rkhunter-1.3.4-5.fc11.noarch fipscheck-1.1.1-1.fc11.i586 How reproducible: Always since full re-install Steps to Reproduce: 1. Let rkh run on schedule 2. 3. Actual results: 08:52:00] Checking for hidden files and directories [ Warning ] [08:52:00] Warning: Hidden file found: /usr/bin/.fipscheck.hmac: ASCII text Expected results: Additional info: http://people.redhat.com/tmraz/fipscheck/fipscheck.spec Should this be whitelisted\default as per ssh stuff?
Yeah, these FIPS files keep getting added. ;( Adding Tomáš here. Tomáš: Can we expect more of these files? Would you like to just add them to rkhunter when you add them to other packages? Or just let me know when they are to appear and I can add them?
We have these files in openssl, openssh, libgcrypt and fipscheck packages. They will be added for the openswan package if they are not there yet. I don't think they will be added to any additional packages.
rkhunter-1.3.4-6.fc11 has been submitted as an update for Fedora 11. http://admin.fedoraproject.org/updates/rkhunter-1.3.4-6.fc11
This bug appears to have been reported against 'rawhide' during the Fedora 11 development cycle. Changing version to '11'. More information and reason for this action is here: http://fedoraproject.org/wiki/BugZappers/HouseKeeping
rkhunter-1.3.4-6.fc11 has been pushed to the Fedora 11 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update rkhunter'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F11/FEDORA-2009-6241
rkhunter-1.3.4-6.fc11 has been pushed to the Fedora 11 stable repository. If problems still persist, please make note of it in this bug report.
Kevin, do you plan to push this update to EPEL repo, too?
Using rkhunter-1.3.4-7.fc11.noarch I still have this warning.. ?
(In reply to comment #7) > Kevin, do you plan to push this update to EPEL repo, too? Yeah, I guess it's needed now that 5.4 has fips in it. ;( (In reply to comment #8) > Using rkhunter-1.3.4-7.fc11.noarch I still have this warning.. ? Check to see if you have a /etc/rkhunter.conf.rpmnew that has the added definitions in it. You will need to merge them into your config or copy it in place and re-add any customizations you have made.