Rootkit Hunter has requirement on net-tools however when I check [1] what tools does it use I find only the following code in rkhunter-1.3.8/files/rkhunter:

if [ -n "${IFCONFIG_CMD}" ]; then
  case "${OPERATING_SYSTEM}" in
    *BSD|DragonFly)
    ;;
    SunOS|IRIX*|AIX)
    ;;
    *)
      PROMISCSCAN1=`${IFCONFIG_CMD} 2>&1 | ...`
    ;;
  esac
  if [ $LINUXOS -eq 1 ]; then
	if [ -n "${IP_CMD}" ]; then
	PROMISCSCAN2=`${IP_CMD} link | ...`
	fi
  fi

That means that on Linux it's able to use both ifconfig (${IFCONFIG_CMD}) and ip (${IP_CMD}) to check the promiscuous mode of network interfaces.

As you maybe know net-tools (ifconfig) has been deprecated for some time.
We (as well as other distributions) try to eviscerate net-tools' use from as many packages as possible and replace it with iproute.

So what about removing the 'Requires: net-tools' from rkhunter.spec ?
Given that rkhunter is already able to use ip command there should be no problem.


[1] grep -i -R -E 'arp|etherwake|ifconfig|ipmaddr|iptunnel|mii-diag|mii-tool|nameif|plipconfig|route|slattach' *