Port baseline to Debian 11 (codename Bullseye).

1 files changed, 1 insertions, 2 deletions

diff --git a/roles/common/files/etc/rkhunter.conf b/roles/common/files/etc/rkhunter.conf
index ef38ab6..c7358d0 100644
--- a/roles/common/files/etc/rkhunter.conf
+++ b/roles/common/files/etc/rkhunter.conf
@@ -336,41 +336,41 @@ ALLOW_SSH_PROT_V1=2
 # option can use the word 'ALL' to refer to all of the available tests. The
 # DISABLE_TESTS option can use the word 'NONE' to mean that no tests are
 # disabled. The list of disabled tests is applied to the list of enabled tests.
 #
 # Both options are space-separated lists of test names, and both options may
 # be specified more than once. The currently available test names can be seen
 # by using the command 'rkhunter --list tests'.
 #
 # The supplied configuration file has some tests already disabled, and these
 # are tests that will be used only occasionally, can be considered 'advanced'
 # or that are prone to produce more than the average number of false-positives.
 #
 # Please read the README file for more details about enabling and disabling
 # tests, the test names, and how rkhunter behaves when these options are used.
 #
 # The default values are to enable all tests and to disable none. However, if
 # either of the options below are specified, then they will override the
 # program defaults.
 #
 ENABLE_TESTS=ALL
-DISABLE_TESTS=suspscan hidden_procs deleted_files packet_cap_apps apps
+DISABLE_TESTS=suspscan hidden_ports hidden_procs deleted_files packet_cap_apps apps
 
 #
 # The HASH_CMD option can be used to specify the command to use for the file
 # properties hash value check. It can be specified as just the command name or
 # the full pathname. If just the command name is given, and it is one of MD5,
 # SHA1, SHA224, SHA256, SHA384 or SHA512, then rkhunter will first look for the
 # relevant command, such as 'sha256sum', and then for 'sha256'. If neither of
 # these are found, it will then look to see if a perl module has been installed
 # which will support the relevant hash function. To see which perl modules have
 # been installed use the command 'rkhunter --list perl'.
 #
 # Systems using prelinking are restricted to using either the SHA1 or MD5
 # function.
 #
 # A value of 'NONE' (in uppercase) can be specified to indicate that no hash
 # function should be used. Rkhunter will detect this, and automatically disable
 # the file properties hash check test.
 #
 # Examples:
 #   For Solaris 9 : HASH_CMD=gmd5sum
@@ -579,41 +579,40 @@ EXISTWHITELIST=/usr/bin/fgrep
 
 #
 # Allow the specified file to have the 'others' (world) permission have the
 # write-bit set. For example, files with permissions r-xr-xrwx or rwxrwxrwx.
 #
 # This option may be specified more than once, and may use wildcard characters.
 #
 # The default value is the null string.
 #
 #WRITEWHITELIST=/usr/bin/date
 
 #
 # Allow the specified file to be a script.
 #
 # This option may be specified more than once, and may use wildcard characters.
 #
 # The default value is the null string.
 #
 SCRIPTWHITELIST=/bin/egrep
 SCRIPTWHITELIST=/bin/fgrep
-SCRIPTWHITELIST=/bin/which
 SCRIPTWHITELIST=/usr/bin/egrep
 SCRIPTWHITELIST=/usr/bin/fgrep
 SCRIPTWHITELIST=/usr/bin/which
 SCRIPTWHITELIST=/usr/bin/ldd
 SCRIPTWHITELIST=/usr/bin/lwp-request
 SCRIPTWHITELIST=/usr/sbin/adduser
 #SCRIPTWHITELIST=/usr/sbin/prelink
 #SCRIPTWHITELIST=/usr/sbin/unhide.rb
 
 #
 # Allow the specified file to have the immutable attribute set.
 #
 # This option may be specified more than once, and may use wildcard characters.
 #
 # The default value is the null string.
 #
 #IMMUTWHITELIST=/sbin/ifdown
 
 #
 # If this option is set to '1', then the immutable-bit test is reversed. That