I've got a centOS 6 64 bit server, and have installed rkhunter.
I spent some time running scans and tweaking things so that rkhunter throws up no warnings (e.g setting the PermitRootLogin var in /etc/rkhunter.conf to the same value as in my sshd.conf, and running rkhunter --propupd), however I still have one thing popping up in the logs:
872059-[10:57:36] Info: Starting test name 'hidden_ports'
872110:[10:57:36] Checking for hidden ports [ Skipped ]
872183-[10:57:36] Info: Unable to find the 'unhide-tcp' command
After a bit of googling, it seems I need to install the unhide package so rkhunter can check for hidden ports. But I haven't been able to figure out where to get it - I've added the rpmforge repo which apparently did have it at some point, but when I try to install or search for it:
$ sudo yum install unhide unhide-tcp
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* base: mirror.as29550.net
* extras: mirror.as29550.net
* rpmforge: nl.mirror.eurid.eu
* updates: centosn4.centos.org
Setting up Install Process
No package unhide available.
No package unhide-tcp available.
Error: Nothing to do
Anyone know what repo I need to add, or even if unhide is still in existence?
