When rkhunter does FreeBSD's specific checks it compares output of sockstat and netstat and if there's a difference it reports warning. The problem is that sockstat command returns ports as numbers, and netstat command returns it as numbers with dot sign in front.
Fix: Patch attached.
Patch attached with submission follows:
How-To-Repeat: Install rkhunter 1.3.4 from ports and run rkhunter --propupd -c --rwo
If some services are listening on some ports you'll get:
Warning: Differences found between sockstat and netstat output:
Sockstat output: 110
Netstat output: .110
I'll take it.
miwi 2009-03-16 22:01:34 UTC
FreeBSD ports repository
- Fix warning output
Submitted by: Lukasz Wasikowski <firstname.lastname@example.org>
Revision Changes Path
1.3 +1 -1 ports/security/rkhunter/files/patch-rkhunter
email@example.com mailing list
To unsubscribe, send any mail to "firstname.lastname@example.org"