Watchdog / Rootkithunter can't find MD5

[splacknuck@]

Watchdog’s security check via the control panel starts Rootkithunter 1.2.8. Although I added the following lines to /usr/local/psa/var/modules/watchdog/lib/rkhunter/db/os.dat:

751:SUSE LINUX 10.2 (i386):/usr/bin/md5sum:/bin:
752:SUSE LINUX 10.2 (i586):/usr/bin/md5sum:/bin:
753:SUSE LINUX 10.2 (X86-64):/usr/bin/md5sum:/bin:

Rootkithunter claims that

Warning: Cannot find Location of md5
All MD5 checks will be skipped!

Is there a solution for this? I found a post in this forum relating to Plesk 8.3: problem with watchdog no md5.

Unfortunately with Plesk 8.6 I am still experiencing this problem.

 

[Roland Leurs]

A solution to Rootkithunter can't find MD5

Hi,

Maybe a little late, but I have found a solution to this problem.

The problem is RKHUNTER 1.2.8 is searching for the string "SuSE Linux" in /etc/SuSE-release. In openSuse however, it has openSuSE 10.2 (i586) in this file.

The solution is simple: edit /usr/local/psa/admin/sbin/modules/watchdog/rkhunter line 2035 and change it to:

version=`cat /etc/SuSE-release | grep -i "openSUSE"`

This works for my server.

I didn't try to find out if the latest release of rkhunter (1.3.4) does better detection. But this is a quick fix to solve this.