Hi there.. I have a server running with Fedora Core release 5 (Bordeaux)
2.6.15.1 #2 Thu Dec 7 15:14:10 PST 2006 i686 i686 i386 GNU/Linux
version
Just installed Rkhunter 1.3.2 version from 1.2.9 version
After running the --check on rkhunter .. i checked the rkhunter.log to see what it says and i get "no hash values" on 65 of my commands which is kinda odd because i wasnt getting this on the previous version. I read that it has to do with prelinked files but i cant find an actual fix for it ..heard there was something called hashupd.sh but i cant find it anymore.
Can someone help out if they know about this? Here's a part of my log before.
Thanks!
---------Log below-----------
[11:55:15] /bin/gawk [ OK ]
[11:55:15] /bin/tcsh [ OK ]
[11:55:15] /usr/bin/awk [ Warning ]
[11:55:15] Warning: No hash value found for file '/usr/bin/awk' in the rkhunter.dat file.
[11:55:16] /usr/bin/chattr [ Warning ]
[11:55:16] Warning: No hash value found for file '/usr/bin/chattr' in the rkhunter.dat file.
[11:55:17] /usr/bin/curl [ Warning ]

The 1.3 series changed *a lot*. Reading the accompanying docs is strongly suggested. It will for instance tell you to configure your rkhunter.conf and run 'rkhunter --propupd' before scanning. The "hashupd" kludge that was introduced as a workaround for kludgy things in 1.2.x is officially deprecated.


Auch! FC5 is dead, dead, dead. You should be at F8 or 9 if you want to keep up with things the Fedora way.

BTW, RKH may be a security related tool but this issue isn't about Linux Security but software, configuration. I'll move the thread.