Hello,


I noticed that the program and the data available on the internet are from 2018-02.
So almost 6 years old data suggests a non-existent security.

My suggestion would therefore be to remove rkhunter from sid and trixie.

CU
Jörg

Hi Jörg, are you aware of security vulnerabilities in rkhunter or you are
simply guessing that it might contain security vulnerabilities?

As far as I am aware, rkhunter is not under active development anymore, but
it also doesn't have any known vulnerabilities.

Francois

Hello Francois,

I did not search for Vulnerabilities. However, I am of the opinion that using
rkhunter in its current form is equivalent to using a 6 year old virus scanner
and therefore involves an increased security risk.




Am Dienstag, dem 05.12.2023 um 12:39 -0800 schrieb Francois Marier:

CU
Jörg

Ideally I agree that it would be great if more signatures could be added so
that new threats could be detected. I don't see any indication that of
vulnerabilities in this software however. Lack of new upstream development
is not necessarily an indication that the software is unsafe.

Francois

i dont think this is a good analagy. rkhunter isnt only a virus scanner.
despite the name, several of the tests are not looking for specific
rootkits but for anomolies - scripts changing hashes, binaries replaced by
scripts. these tests still work (mostly) and provide as much benefit as
they ever did.


people that dont want rkhunter can uninstall it, as with any other optional
package.