Page 1 of 1

rkhunter-1.2.8 in /usr/lib64 on FC3 i386?

Posted: Thu Mar 16, 2006 7:20 am
by breun
I ran yum update on one of my FC3 i386 machines and it installed rkhunter-1.2.8-1.fc3. rkhunter stopped working and I think it's because rpm -ql rkhunter shows me there's stuff installed into /usr/lib64 while this isn't a 64 bit OS:

Code: Select all

/etc/cron.daily/01-rkhunter
/etc/logrotate.d/rkhunter
/etc/rkhunter.conf
/etc/sysconfig/rkhunter
/usr/bin/rkhunter
/usr/lib64/rkhunter
/usr/lib64/rkhunter/scripts
/usr/lib64/rkhunter/scripts/check_modules.pl
/usr/lib64/rkhunter/scripts/check_port.pl
/usr/lib64/rkhunter/scripts/check_update.sh
/usr/lib64/rkhunter/scripts/filehashmd5.pl
/usr/lib64/rkhunter/scripts/filehashsha1.pl
/usr/lib64/rkhunter/scripts/showfiles.pl
/usr/share/doc/rkhunter-1.2.8
/usr/share/doc/rkhunter-1.2.8/CHANGELOG
/usr/share/doc/rkhunter-1.2.8/LICENSE
/usr/share/doc/rkhunter-1.2.8/README
/usr/share/doc/rkhunter-1.2.8/WISHLIST
/usr/share/man/man8/rkhunter.8.gz
/var/rkhunter
/var/rkhunter/db
/var/rkhunter/db/backdoorports.dat
/var/rkhunter/db/defaulthashes.dat
/var/rkhunter/db/md5blacklist.dat
/var/rkhunter/db/mirrors.dat
/var/rkhunter/db/os.dat
/var/rkhunter/db/programs_bad.dat
/var/rkhunter/db/programs_good.dat
/var/rkhunter/tmp
Strangely enough I don't see a 1.2.8 release at all at http://3es.atomicrocketturtle.com/atomic/art/3/RPMS/ , still I am getting it from ART. What's up?

Posted: Thu Mar 16, 2006 9:30 am
by scott
Thats definitely not my RPM, I just checked and I havent even released a 1.2.8 version (I will now though!). Take a look at it with: rpm -qi rkhunter
that will tell you who made it hopefully.

Posted: Thu Mar 16, 2006 10:02 am
by breun
I could've sworn it was an .art package, but now I run yum update again I see it's from Fedora Extras. Sorry to bother you.

Code: Select all

Transaction Listing:
  Update: rkhunter.noarch 0:1.2.8-1.fc3 - extras
Total download size: 120 k
Is this ok [y/N]:
Think I'll disable Extras anyway on my FC3 servers. Don't think I've ever installed a package from that repo before.

Posted: Thu Mar 16, 2006 10:22 am
by breun

Posted: Fri Mar 17, 2006 11:50 am
by breun
There was indeed a problem their .spec file.