I've got a centOS 6 64 bit server, and have installed rkhunter.
I spent some time running scans and tweaking things so that rkhunter throws up no warnings (e.g setting the PermitRootLogin var in /etc/rkhunter.conf to the same value as in my sshd.conf, and running
rkhunter --propupd), however I still have one thing popping up in the logs:
872059-[10:57:36] Info: Starting test name 'hidden_ports' 872110:[10:57:36] Checking for hidden ports [ Skipped ] 872183-[10:57:36] Info: Unable to find the 'unhide-tcp' command
After a bit of googling, it seems I need to install the
unhide package so rkhunter can check for hidden ports. But I haven't been able to figure out where to get it - I've added the
rpmforge repo which apparently did have it at some point, but when I try to install or search for it:
$ sudo yum install unhide unhide-tcp Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: mirror.as29550.net * extras: mirror.as29550.net * rpmforge: nl.mirror.eurid.eu * updates: centosn4.centos.org Setting up Install Process No package unhide available. No package unhide-tcp available. Error: Nothing to do
Anyone know what repo I need to add, or even if
unhide is still in existence?