Package: rkhunter Version: 1.3.0-2 Severity: normal Tags: patch unhide has just been accepted in unstable. rkhunter's documentation should be updated to reflect that change.
Here's a patch which also adds it in the list of recommended packages. Francois
--- debian/README.Debian.old 2007-12-10 09:29:14.000000000 +1300 +++ debian/README.Debian 2007-12-10 09:29:55.000000000 +1300 @@ -66,12 +66,6 @@ rkhunter also supports two 3rd party tools which are not in debian: - * unhide - http://www.security-projects.com/?Unhide - Unhide is a forensic tool to find hidden processes and TCP/UDP ports - by rootkits / LKMs or by another hidden technique. - - It is required to run the 'hidden_procs' test (disabled by default). - * skdet - http://www.rootshell.be/~unspawn/packaging/skdet.html (*) Skdet is a simple program that will detect the following rootkits: - SucKIT (<=1.3b) --- debian/patches/05_custom_conffile.dpatch.old 2007-12-10 09:26:58.000000000 +1300 +++ debian/patches/05_custom_conffile.dpatch 2007-12-10 09:28:17.000000000 +1300 @@ -42,8 +42,8 @@ # Please read the README file for more details about enabling and disabling # tests, the test names, and how rkhunter behaves when these options are used. # -+# hidden_procs test requires unhide command which is not yet available -+# in Debian. This test should thus remain disabled. ++# hidden_procs test requires the unhide command which is part of the unhide ++# package in Debian. ENABLE_TESTS="all" DISABLE_TESTS="suspscan hidden_procs deleted_files packet_cap_apps" --- debian/control.old 2007-12-10 09:25:55.000000000 +1300 +++ debian/control 2007-12-10 09:26:08.000000000 +1300 @@ -10,7 +10,7 @@ Package: rkhunter Architecture: all Depends: file, exim4 | postfix | sendmail | mail-transport-agent, perl, net-tools, ${misc:Depends} -Recommends: libmd5-perl, binutils, wget | curl | links | elinks | lynx, iproute +Recommends: libmd5-perl, binutils, wget | curl | links | elinks | lynx, iproute, unhide Suggests: mailx Description: rootkit, backdoor, sniffer and exploit scanner Rootkit Hunter scans your system for known and unknown rootkits,

