Package: rkhunter Version: 1.4.6-5 Severity: normal After usrmerge has been run against a Debian system, /usr/bin/egrep becomes a script, because it is moved from /bin/egrep. There is a SCRIPTWHITELIST entry in the default rkhunter config for /bin/egrep but not /usr/bin/egrep which causes it to warn that /usr/bin/egrep has been replaced by a script each day during its daily run. Since usrmerge is the default for Buster, this should probably be added to the default config.
-- System Information: Debian Release: buster/sid Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 5.0.0-17-generic (SMP w/8 CPU cores) Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), LANGUAGE=en_AU.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages rkhunter depends on: ii binutils 2.32.51.20190701-1 ii debconf [debconf-2.0] 1.5.72 ii file 1:5.35-4 ii lsof 4.91+dfsg-1ubuntu1 ii net-tools 1.60+git20180626.aebd88e-1ubuntu1 ii perl 5.28.1-6 ii ucf 3.0038+nmu1 Versions of packages rkhunter recommends: ii bsd-mailx [mailx] 8.1.2-0.20180807cvs-1 ii curl 7.64.0-4ubuntu1 ii e2fsprogs 1.45.2-1ubuntu1 ii exim4-daemon-heavy [mail-transport-agent] 4.92-7ubuntu1 ii iproute2 5.1.0-1 ii s-nail 14.9.13-1 ii unhide 20130526-3 pn unhide.rb <none> ii wget 1.20.1-1.1ubuntu1 Versions of packages rkhunter suggests: ii liburi-perl 1.76-1 ii libwww-perl 6.36-2 ii powermgmt-base 1.34 -- debconf information: * rkhunter/cron_db_update: true * rkhunter/cron_daily_run: true * rkhunter/apt_autogen: true
