[Bug 1940851] Re: False positive: "running_procs" incorrectly reports libkeyutils.so.1.9 as "Spam tool component"
I'm having the same kind of problem on a host that has postgres running inside a docker container. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1940851 Title: False positive: "running_procs" incorrectly reports libkeyutils.so.1.9 as "Spam tool component" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rkhunter/+bug/1940851/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1940851] Re: False positive: "running_procs" incorrectly reports libkeyutils.so.1.9 as "Spam tool component"
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: rkhunter (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1940851 Title: False positive: "running_procs" incorrectly reports libkeyutils.so.1.9 as "Spam tool component" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rkhunter/+bug/1940851/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1940851] Re: False positive: "running_procs" incorrectly reports libkeyutils.so.1.9 as "Spam tool component"
According to some reports, this ought to help: RTKT_FILE_WHITELIST=/usr/lib/x86_64-linux-gnu/libkeyutils.so.1.9 However, in our use case the file in question does not exist on the host system, only inside the containers, so this yields me "Invalid RTKT_FILE_WHITELIST configuration option: Non-existent pathname: /lib/x86_64-linux-gnu/libkeyutils.so.1.9" The only workaround I have found so far is far from ideal: DISABLE_TESTS=running_procs :-( -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1940851 Title: False positive: "running_procs" incorrectly reports libkeyutils.so.1.9 as "Spam tool component" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rkhunter/+bug/1940851/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1940851] Re: False positive: "running_procs" incorrectly reports libkeyutils.so.1.9 as "Spam tool component"
Fixed in Debian, see https://bugs.debian.org/cgi- bin/bugreport.cgi?bug=951366 ** Bug watch added: Debian Bug tracker #951366 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=951366 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1940851 Title: False positive: "running_procs" incorrectly reports libkeyutils.so.1.9 as "Spam tool component" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rkhunter/+bug/1940851/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs