On 1/21/21 10:32 PM, Stephen Morris wrote:
Just on the topic of rkhunter, I've run the command rkhunter
--check and
gotten a number of warnings. Among them were warnings about
/usr/bin/egrep, /usr/bin/fgrep, /usr/libexec/nm-ifdown and
/usr/libexec/nm-ifup having been replaced by a script and obviously not
whitelisted. Would the replacement of those commands be something done
within package management and rkhunter hasn't been updated to cater for
that, or am I encountering a situation where those commands have been
changed by something outside of the package management environment?
If you looked at the content of those files, you would see that why they
are scripts now. The upstreams have changed the files and rkhunter
hasn't been updated.