rkhunter: xinetd services for qmail running when postfix is used?

[B_P]

Dear all,

my Plesk system (Ubuntu 12.04, Postfix, ...) is running for more than a year now.
Recently, the watchdog / rkhunter system started to produce the following messages:

[01:02:05] Checking '/etc/xinetd.d/smtp_psa' for enabled services [ Warning ]
[01:02:05] Checking '/etc/xinetd.d/smtps_psa' for enabled services [ Warning ]

These two services seem to belong to qmail and should thus be disabled in my configuration where postfix is used as mail server. As I can see from previous log files, they were disabled until June 22. From this day on, the services were enabled (disabled = no) without manual intervention. I assume that some kind of update caused this change. Did anybody else experience something similar? I change "disabled = yes" for these two services manually. Is there any other issue I might run into?

Additionally, the Plesk FAQ lists
/usr/local/psa/etc/modules/watchdog/rkhunter.conf
as the configuration file for rkhunter. However, the first line of this file tells me that I should not change it since it is automatically created and that changes may be overwritten with future updates. Where should I make persistent changes for rkhunter then?

P.S.: It is quite annoying that rkhunter is complaining about outdated versions of GnuPG, OpenSSL and OpenSSH with an up-to-date Ubuntu 12.04 LTS...

 

[IgorG]

Make sure that qmail packages are completely uninstalled with

# dpkg -l | grep qmail

 

[B_P]

Thanks Igor for your response!

Make sure that qmail packages are completely uninstalled with

# dpkg -l | grep qmail

There is no qmail-related package installed - your recomended dpkg query returns an empty response.

Should the smpt(s)_psa config files even be deleted? xinetd ignores them since the disabled flag is set. However, this still produces an error message since the program that should be executed does not exist:

xinetd: Reading included configuration file: /etc/xinetd.d/smtp_psa [file=/etc/xinetd.d/smtp_psa] [line=16]
xinetd: Server /var/qmail/bin/tcp-env is not executable [file=/etc/xinetd.d/smtp_psa] [line=10]
xinetd: Error parsing attribute server - DISABLING SERVICE [file=/etc/xinetd.d/smtp_psa] [line=10]
xinetd: Reading included configuration file: /etc/xinetd.d/smtps_psa [file=/etc/xinetd.d/smtps_psa] [line=12]
xinetd: Server /var/qmail/bin/tcp-env is not executable [file=/etc/xinetd.d/smtps_psa] [line=10]
xinetd: Error parsing attribute server - DISABLING SERVICE [file=/etc/xinetd.d/smtps_psa] [line=10]

Additionally, here is the error message that is given for the main config file of xinetd:

xinetd: attribute: disable should not be in default section [file=/etc/xinetd.conf] [line=12]

 

[IgorG]

Strange. You can try to remove these files and check how it goes on after that.