Beginner needs help with watchdog / rkhunter

English Applications
#1

I have Watchdog installed on Linux 2.6.27.9 with Plesk 9.0.1. where Watchdog sends me a report every night. From time to time I get a hint for a security report and this report looks like this:

--------------- Report Start ------------------- Rootkit Hunter version 1.3.4 ]

Checking rkhunter data files…
Checking file mirrors.dat No update ]
Checking file programs_bad.dat No update ]
Checking file backdoorports.dat No update ]
Checking file suspscan.dat No update ]
Checking file i18n/cn No update ]
Checking file i18n/de No update ]
Checking file i18n/en No update ]
Checking file i18n/zh No update ]
Checking file i18n/zh.utf8 No update ]
Invalid option specified: --report-mode
--------------- Report End -------------------

Now I read, that the option “report-mode” is deprecated, so I think, that it should be removed to solve the problem. But I have no idea where to look, can someone give me a hint?

TIA, Detlef

#2

On 6/11/09 12:16 PM, zdev wrote:
> I have Watchdog installed on Linux 2.6.27.9 with Plesk 9.0.1. where
> Watchdog sends me a report every night. From time to time I get a hint
> for a security report and this report looks like this:
>
> --------------- Report Start ------------------- Rootkit Hunter
> version 1.3.4 ]
>
> Checking rkhunter data files…
> Checking file mirrors.dat No update ]
> Checking file programs_bad.dat No update ]
> Checking file backdoorports.dat No update ]
> Checking file suspscan.dat No update ]
> Checking file i18n/cn No update ]
> Checking file i18n/de No update ]
> Checking file i18n/en No update ]
> Checking file i18n/zh No update ]
> Checking file i18n/zh.utf8 No update ]
> Invalid option specified: --report-mode
> --------------- Report End -------------------
>
> Now I read, that the option “report-mode” is deprecated, so I think,
> that it should be removed to solve the problem. But I have no idea where
> to look, can someone give me a hint?
>
> TIA, Detlef
>
>
Check and see if there is a cron job that runs this report and if so
remove that option from there.

#3

Yes, this seems to be a cronjob. In the Plesk Control-Panel I have the setting, that the security check shall be done one a day. I found that before … but - SORRY - I do not know where the settings of the cron-job are …
I mean, I assume, that there is something like a batch routine, that calls the rkhunter with the old parameters. But in Plesk I do not see, where those things are stored.

TIA, Detlef