Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

HRDN-7220 conflicts with HRDN-7230 (rkhunter vs as compiler) #1576

Open
vk6xebec opened this issue Nov 15, 2024 · 4 comments
Open

HRDN-7220 conflicts with HRDN-7230 (rkhunter vs as compiler) #1576

vk6xebec opened this issue Nov 15, 2024 · 4 comments

Comments

@vk6xebec
Copy link
Contributor

Describe the bug
HRDN-7230 checks if there is a malware scanner. One of the scanners suggested by Lynis is RKhunter. HRDN-7220 checks for the presence of a complier.

However, the as (assembly) complier is listed as a required dependency of rkhunter through binutils. Without this program, rkhunter cannot be operated.

Version

  • Distribution [e.g. Ubuntu 24.10]
  • Lynis version [e.g. 3.1.2]

Expected behavior
Hard one really
Since this is a conflict causing another test to fail, maybe rkhunter not be suggested as a rootkit checker?
or maybe ignore this check?

@teoberi
Copy link
Contributor

teoberi commented Nov 17, 2024

Is Rkhunter still significant?

@mboelen
Copy link
Member

mboelen commented Nov 18, 2024

Not sure why binutils is linked to the rkhunter, as in the past it has no dependencies. Do you know why that is @vk6xebec ?

A few months ago I learned that there is a new maintainer for the project. Otherwise I would have picked it up. So I would say it is still significant, unless there won't be updates within 1 year..

@teoberi
Copy link
Contributor

teoberi commented Nov 18, 2024

Without updates for over 6 years, NOW I don't think it's relevant.
It would at least deserve a warning upon detection.
Same with LILO/ELILO here.

@vk6xebec
Copy link
Contributor Author

@mboelen no am not sure why this would be the case. The tests used to pass till about a year ago. I can't remove binutils without it uninstalling rkhunter and some other programs.

As to if its still relevant, I can't comment as I do not know if technology has changed or so since then - I'll leave it for others to review and comment.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants