Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: hollymcr on July 07, 2006, 11:31:46 AM

Title: Controlling Root Kit Hunter (rkhunter)
Post by: hollymcr on July 07, 2006, 11:31:46 AM

Is there anyway I can control Root Kit Hunter?

Specifically I want to disable checks for PermitRootLogin (I understand the reasons for it complaining but once I've made my decision to ignore that warning I don't want to be told about it every day).

I don't want to disable rkhunter (although if that's my only option then please tell me how to do it!).

Title: Controlling Root Kit Hunter (rkhunter)
Post by: mdo on July 07, 2006, 12:56:25 PM

/etc/rkhunter.conf
might be the file that you want to change for this?

E.g.:
# MDO, 18.6.06 changed to 1 to allow ssh root access
ALLOW_SSH_ROOT_USER=1

It looks to me that this file is NOT created as a template, instead it comes from the rpm (rkhunter-1.2.7-1sme07). If you edit/change it, it might be overwritten with a next program/version update for rkhunter.
Michael

Title: Controlling Root Kit Hunter (rkhunter)
Post by: hollymcr on July 07, 2006, 02:29:32 PM

Quote from: "mdo"

/etc/rkhunter.conf
might be the file that you want to change for this?

Doh! Obvious now you say it.

Quote

It looks to me that this file is NOT created as a template, instead it comes from the rpm (rkhunter-1.2.7-1sme07). If you edit/change it, it might be overwritten with a next program/version update for rkhunter.

I'll keep an eye on it, thanks. Hopefully the update won't overwrite the config but we'll see.

Thanks, Michael.