RKHunter warnings: command has been replaced by a script

Refers to:

  • Plesk 12.5 for Linux
  • Plesk 11.0 for Linux
  • Plesk 11.5 for Linux
  • Plesk 12.0 for Linux

Created:

2016-11-16 13:12:03 UTC

Modified:

2016-12-21 20:10:35 UTC

0

Was this article helpful?


Have more questions?

Submit a request

RKHunter warnings: command has been replaced by a script

Symptoms

Security check through Plesk at Modules > Watchdog > Security > Start finishes successfully, however, the following warnings are reported in /var/log/rkhunter.log :

Warning: The command '/usr/bin/GET' has been replaced by a script: /usr/bin/GET: perl script text executable
Warning: The command '/usr/bin/groups' has been replaced by a script: /usr/bin/groups: Bourne shell script text executable
Warning: The command '/usr/bin/ldd' has been replaced by a script: /usr/bin/ldd: Bourne shell script text executable
Warning: The command '/sbin/ifdown' has been replaced by a script: /sbin/ifdown: Bourne-Again shell script text executable
Warning: The command '/sbin/ifup' has been replaced by a script: /sbin/ifup: Bourne-Again shell script text executable

These files exist in the system.

Resolution

Add the following directives to the RKHunter configuration file ("ATTENTION!" section can be ignored):

/usr/local/psa/etc/modules/watchdog/rkhunter.conf
--->8---
SCRIPTWHITELIST=/usr/bin/GET
SCRIPTWHITELIST=/usr/bin/groups
SCRIPTWHITELIST=/usr/bin/ldd
SCRIPTWHITELIST=/sbin/ifdown
SCRIPTWHITELIST=/sbin/ifup
---8<---
Have more questions? Submit a request
Please sign in to leave a comment.