Package: rkhunter
Version: 1.3.8-10
Severity: minor
Tags: patch
Hi,
the weekly cron job does not use the --appendlog option. Hence the
rkhunter.log file is rotated twice: on the one hand by logrotate (to
rkhunter.log.1) and on the other hand by the weekly cron job (to
rkhunter.log.old).
The attached patch fixes this issue.
Best regards
Hannes
-- System Information:
Debian Release: wheezy/sid
APT prefers testing
APT policy: (990, 'testing'), (300, 'unstable'), (200, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 3.2.9 (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages rkhunter depends on:
ii binutils 2.22-5
ii debconf [debconf-2.0] 1.5.41
ii file 5.10-1
ii net-tools 1.60-24.1
ii perl 5.14.2-7
ii ucf 3.0025+nmu2
Versions of packages rkhunter recommends:
ii curl 7.24.0-1
ii elinks 0.12~pre5-7
ii exim4-daemon-light [mail-transport-agent] 4.77-1+b1
ii iproute 20120105-1
ii lsof 4.81.dfsg.1-1
ii unhide.rb | unhide <none>
ii wget 1.13.4-2
Versions of packages rkhunter suggests:
pn bsd-mailx [mailx] 8.1.2-0.20111106cvs-1
pn libdigest-whirlpool-perl <none>
pn liburi-perl 1.59-1
pn libwww-perl 6.03-1
pn powermgmt-base 1.31
pn tripwire <none>
-- Configuration Files:
/etc/cron.weekly/rkhunter changed [not included]
/etc/default/rkhunter changed [not included]
/etc/rkhunter.conf changed [not included]
-- debconf information excluded
--- /etc/cron.weekly/rkhunter.orig 2011-05-14 20:01:56.000000000 +0000
+++ /etc/cron.weekly/rkhunter 2012-03-02 05:48:21.000000000 +0000
@@ -24,13 +24,13 @@ case "$CRON_DB_UPDATE" in
echo "Subject: [rkhunter] $(hostname -f) - Weekly database update"
echo "To: $REPORT_EMAIL"
echo ""
- $RKHUNTER --versioncheck --nocolors
- $RKHUNTER --update --nocolors
+ $RKHUNTER --versioncheck --nocolors --appendlog
+ $RKHUNTER --update --nocolors --appendlog
) | /usr/sbin/sendmail $REPORT_EMAIL
;;
*)
- $RKHUNTER --versioncheck 1>/dev/null 2>$OUTFILE
- $RKHUNTER --update 1>/dev/null 2>>$OUTFILE
+ $RKHUNTER --versioncheck --appendlog 1>/dev/null 2>$OUTFILE
+ $RKHUNTER --update --appendlog 1>/dev/null 2>>$OUTFILE
;;
esac
