APPLIES TO:<\/p>\n
Plesk 12.0 for Linux
\n Plesk 11.0 for Linux
\n Plesk 11.5 for Linux<\/p>\n
Symptoms<\/p>\n
I started a security check through Parallels Plesk Panel at Modules -> Watchdog -> Security -> Start. The process finished successfully, however, the following warning messages are reported in the Watchdog security check log (\/var\/log\/rkhunter.log):<\/p>\n
Warning: The command ‘\/usr\/bin\/GET’ has been replaced by a script: \/usr\/bin\/GET: perl script text executable
\nWarning: The command ‘\/usr\/bin\/groups’ has been replaced by a script: \/usr\/bin\/groups: Bourne shell script text executable
\nWarning: The command ‘\/usr\/bin\/ldd’ has been replaced by a script: \/usr\/bin\/ldd: Bourne shell script text executable
\nWarning: The command ‘\/sbin\/ifdown’ has been replaced by a script: \/sbin\/ifdown: Bourne-Again shell script text executable
\nWarning: The command ‘\/sbin\/ifup’ has been replaced by a script: \/sbin\/ifup: Bourne-Again shell script text executable<\/p>\n
These files exist in the system. How can I reconfigure RKHunter to verify the existence of the binaries and remove the warning messages?
\nResolution<\/p>\n
It is recommended that you add the following directives into the RKHunter configuration file:<\/p>\n
\/usr\/local\/psa\/etc\/modules\/watchdog\/rkhunter.conf
\n—>8—
\nSCRIPTWHITELIST=\/usr\/bin\/GET
\nSCRIPTWHITELIST=\/usr\/bin\/groups
\nSCRIPTWHITELIST=\/usr\/bin\/ldd
\nSCRIPTWHITELIST=\/sbin\/ifdown
\nSCRIPTWHITELIST=\/sbin\/ifup
\n—8<---\n\nIf you want to disable emails, check the log file at \/usr\/local\/psa\/etc\/modules\/watchdog\/rkhunter.conf and set it to\n\n[bash]\n\/usr\/local\/psa\/etc\/modules\/watchdog\/rkhunter.conf\n[\/bash]\n\nOr in \/etc\/cron.daily\/01-rkhunter\n<\/p>\n","protected":false},"excerpt":{"rendered":"
APPLIES TO: Plesk 12.0 for Linux Plesk 11.0 for Linux Plesk 11.5 for Linux Symptoms I started a security check through Parallels Plesk Panel at Modules -> Watchdog -> Security -> Start. The process finished successfully, however, the following warning messages are reported in the Watchdog security check log (\/var\/log\/rkhunter.log): Warning: The command ‘\/usr\/bin\/GET’ has … Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[86,97],"tags":[],"class_list":["post-2355","post","type-post","status-publish","format-standard","hentry","category-plesk","category-rkhunter"],"_links":{"self":[{"href":"https:\/\/www.qbytes.cloud\/index.php\/wp-json\/wp\/v2\/posts\/2355","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.qbytes.cloud\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.qbytes.cloud\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.qbytes.cloud\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.qbytes.cloud\/index.php\/wp-json\/wp\/v2\/comments?post=2355"}],"version-history":[{"count":0,"href":"https:\/\/www.qbytes.cloud\/index.php\/wp-json\/wp\/v2\/posts\/2355\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.qbytes.cloud\/index.php\/wp-json\/wp\/v2\/media?parent=2355"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.qbytes.cloud\/index.php\/wp-json\/wp\/v2\/categories?post=2355"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.qbytes.cloud\/index.php\/wp-json\/wp\/v2\/tags?post=2355"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}