[Slackbuilds-users] Rkhunter 1.3.8 breaks due to the update to file 5.09

[Greg' Ar Tourter]

Hi,

I suspect this change in behaviour from "file" will also create a
problem in the default slackbuild templates where it looks for
binaries to strip

find $PKG -print0 | xargs -0 file | grep -e "executable" -e "shared
object" | grep ELF \
  | cut -f 1 -d : | xargs strip --strip-unneeded 2> /dev/null || true

This line will now react to scripts as well.

Not sure yet what we should do about that but thought I should flag it.

Cheers

Greg

On 17 October 2011 05:10, Helmut Hullen <Hullen at t-online.de> wrote:
> Hallo, Black,
>
> Du meintest am 17.10.11:
>
>> The last update of the file app in Slackware 13.37 triggers a very
>> nasty false positive in rkhunter 1.3.8.
>
> Reproduceable, not only in a slackware installation.
>
> "file-5.07" makes no problems, "file-5.08" and "file-5.09" produce
>
> "Warning: The command '/usr/bin/rkhunter' has been replaced and is not a
> script: /usr/bin/rkhunter: POSIX shell script, ASCII text executable"
>
> Viele Gruesse!
> Helmut
> _______________________________________________
> SlackBuilds-users mailing list
> SlackBuilds-users at slackbuilds.org
> http://lists.slackbuilds.org/mailman/listinfo/slackbuilds-users
> Archives - http://lists.slackbuilds.org/pipermail/slackbuilds-users/
> FAQ - http://slackbuilds.org/faq/
>
>