rkhunter ALLOW_SSH_ROOT_USER

Discussion in 'Server Operation' started by Tom John, Dec 17, 2024 at 1:13 PM.

  1. Tom John

    Tom John Active Member HowtoForge Supporter

    Hi guys,
    when configuring rkhunter i get the following warning:
    Code:
    Warning: The SSH and rkhunter configuration options should be the same:
    SSH configuration option 'PermitRootLogin': no
    Rkhunter configuration option 'ALLOW_SSH_ROOT_USER': unset
    
    my sshd config ist like that:
    Code:
    user:~$ cat -v /etc/ssh/sshd_config | grep PermitRootLogin
    PermitRootLogin no
    
    my rkhunter conf is like that:
    Code:
    user:~$ cat -v /etc/rkhunter.conf | grep ALLOW_SSH_ROOT_USER
    ALLOW_SSH_ROOT_USER=no
    
    everything seems to be ok, but however it get the warning with rkhunter.
    Do you guys have any idea why?
    thanks a lot for your kind help
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    It looks fine to me. Double-check that there is no # in front of the line in rkhunter.conf and you might want to try to run:

    rkhunter --propupd

    If this does not help, take a look at rkhunter.conf if there is any syntax error above that line like a missing closing double quote.
     
  3. nhybgtvfr

    nhybgtvfr Well-Known Member HowtoForge Supporter

    also, check if there's an /etc/rkhunter.conf.local, and if there is, check what's set in there.
     
    till likes this.
  4. Tom John

    Tom John Active Member HowtoForge Supporter

    thanks a lot for your quick help, the problem was /etc/rkhunter.conf.local there was ALLOW_SSH_ROOT_USER': unset
    everything solved thanks to you guys
     

Share This Page