Topic: rkhunter message everyday after march 28 updates

[cirkit]

After performing updates to two of my sme servers on Mar 28 2009 i get this message every day.
Please help me understand and solve this issue

/etc/cron.daily/freshclam:

/usr/bin/freshclam: unrecognized option `--log-verbose'
ERROR: Unknown option passed
ERROR: Can't parse command line opt

[cactus]

After performing updates to two of my sme servers on Mar 28 2009 i get this message every day.
Please help me understand and solve this issue

/etc/cron.daily/freshclam:

/usr/bin/freshclam: unrecognized option `--log-verbose'
ERROR: Unknown option passed
ERROR: Can't parse command line opt

Things like this should not be reported here but in the bugtracker, it says so in red letters every time you post a message.

Luckily someone has already done that for you so the problem is registered: http://bugs.contribs.org/show_bug.cgi?id=5114

If you want to stay informed on the proceedings of this bug add your e-mail to the CC list.

[cirkit]

thanks for the same.
but at the same time I would like to ask that how do we know that if it's a BUG or an error only limited to our server?

[Stefano]

thanks for the same.
but at the same time I would like to ask that how do we know that if it's a BUG or an error only limited to our server?

if something doesn't work "out-of-the-box", raise a bug...

Ciao
Stefano

[cactus]

thanks for the same.
but at the same time I would like to ask that how do we know that if it's a BUG or an error only limited to our server?

You should not be the judge of that, let the more capable people guide you. If the developers decide that it is not a bug they can guide you to the proper channel. If you have a stock SME Server without contribs and modified templates you are save to report issues as a bug.

[cirkit]

the messages i got were from servers working for over one year, when things were moving smooth and suddenly you come accross some problems the first thing to do is to search the forums and i did so having come accross only one report of such occurance i thought to ask for some help. A person asking for help needs help, the simplest answer to this was " that it's a bug already reported" rather than directing the needy directly to the bugtracker

[koshakis]

the messages i got were from servers working for over one year, when things were moving smooth and suddenly you come accross some problems the first thing to do is to search the forums and i did so having come accross only one report of such occurance i thought to ask for some help. A person asking for help needs help, the simplest answer to this was " that it's a bug already reported" rather than directing the needy directly to the bugtracker

I agree with cirkit......

Koshakis

[janet]

cirkit

......I would like to ask that how do we know that if it's a BUG or an error only limited to our server?

By reporting it in bugzilla. If it's not a bug then you will be told so and you can then come back to the forums with a general request for help.

If developers and/or people who assist with bug resolution think it looks like it could be a bug, then the matter will be investigated further (in bugzilla) and you will likely be asked to provide more information.

The message at the top of ALL new posts says:
"Don't report problems here - Please report bugs and potential bugs in the bug tracker"

Note the words "problems", "bugs" and "potential bugs".

Therefore you do not need to have accurately determined that your issue is a bug.

Simply said, if something is not working correctly or as expected then report it to bugzilla. You will then be steered in the right direction.

Obviously if you are just asking for help re how to do this or that etc, then that clearly is not a bug, so some degree of initial filtering is required.

It seems though that some people err on the side of reporting problems in the forums first, as a means of determining whether the problem is a bug, and/or hoping they will get a resolution in the forums.

There is a strong push in this community and general preference by developers etc, to report anything resembling a problem which could be a bug, to bugzilla first, rather than to the forums first.

Even a report that turns out to not be a bug, is therefore well documented and easily searchable (in bugzilla), by future users who have the same problem.

So please get in the habit of using bugzilla, as bugzilla is the tool of choice here.
If you can post to these forums and use & install sme server, then you are certainly capable of using bugzilla.

[cirkit]

That was a nice explanation and I assure I will follow the rules.
Thanks Mary

[soprom]

In conclusion, if we post something on the forum and get flooded with responses about the bugtracker, it's because it's a bug.

Developpers don't like the verbose in the forum (besides issuing warning about using bugzilla). Users seem to like it because they can search easily, scan at large, learn and get some more understanding. Bugzilla is not reader-friendly nor learner-friendly.

And the answer to the question is?

clamav changed its calling procedure and a workaround is being worked out. Please follow bug 5114 to keep posted:
http://bugs.contribs.org/show_bug.cgi?id=5114

[CharlieBrady]

In conclusion, if we post something on the forum and get flooded with responses about the bugtracker, it's because it's a bug.

No, it's because it might be a bug. We need to find out if it is a bug, and fix it if it is, then verify that the fix is correct, then release the update. That process all takes place via the bug tracker. None of it takes place in the forums.

[jokiin]

I had been getting the same error and didn't worry about as I figured a fix was coming (as always) I just applied the clamav updates that were released and the first scan after that I got this message

/etc/cron.daily/01-rkhunter:

Warning: Users have been added to the passwd file:
         admin:x:101:101:e-smith administrator:/home/e-smith:/sbin/e-smith/console
Warning: Users have been removed from the passwd file:
         admin:x:101:101:Local Administrator:/home/e-smith:/sbin/e-smith/console

One or more warnings have been found while checking the system.
Please check the log file (/var/log/rkhunter.log)


not sure if this is related or something I should be concerned about, any thoughts? I normally wouldn't worry too much about these messages that sometimes happen after an update but the administrator user seems out of place here