Date: Sun, 09 Apr 2006 20:48:28 +0200 From: Torfinn Ingolfsen <torfinn.ingolfsen@broadpark.no> To: FreeBSD gnats submit <FreeBSD-gnats-submit@FreeBSD.org> Subject: ports/95553: security/rkhunter overwrites existing rkhunter.conf on install or upgrade Message-ID: <1144608508.14290@kg-work.kg4.no> Resent-Message-ID: <200604091850.k39IoHJd026293@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 95553
>Category: ports
>Synopsis: security/rkhunter overwrites existing rkhunter.conf on install or upgrade
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Sun Apr 09 18:50:16 GMT 2006
>Closed-Date:
>Last-Modified:
>Originator: Torfinn Ingolfsen
>Release: FreeBSD 5.5-PRERELEASE i386
>Organization:
LNSF
>Environment:
System: FreeBSD 5.5-PRERELEASE #6: Sat Mar 11 18:50:33 CET 2006
root@kg-work.kg4.no:/usr/obj/usr/src/sys/SS51G
root@kg-work# portversion -v | grep rkhunter
rkhunter-1.2.8 = up-to-date with port
>Description:
The rkhunter port has a config file in /usr/local/etc/rkhunter.conf. Whenever the port is installed or upgraded, an existing rkhunter.conf file will be overwritten
>How-To-Repeat:
1) create a dummy conf file in /usr/local/etc/rkhunter.conf. Note the details and / or contents
2) install the port with portinstall -R rkhunter, or directly with 'make install' from the port directory.
This last step also gives the same result if the port is upgraded.
>Fix:
- only install rkhunter.conf if there isn't such a file there already
- if /usr/local/etc/rkhunter.conf exists, install the new conf file as rkhunter.conf.sample
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1144608508.14290>