Updated rkhunter package eliminates false positive on gaskit rootkitPublication date: 26 Jun 2013
Affected Mageia releases : 2 , 3
Using rkhunter on a Mageia 2 or 3 system, the gaskit rootkit was erroneously detected as it triggered on the presence of the directory /dev/dev which is commonly available on Mageia systems. Furthermore, the whitelisting of a file which no longer is present on Mageia 3 systems would prevent rkhunter from starting properly. Other files which should have been whitelisted were missing, resulting in warnings appearing. This update addresses these issues. rkhunter users are advised to install the updated package.