yum-plugin-rkhunter.py

import re
import os
import os.path
import yum
from yum.plugins import TYPE_INTERACTIVE

requires_api_version = '2.1'
plugin_type = (TYPE_INTERACTIVE,)

active = False

def init_hook(conduit):
    global active
    active = False
    exe = '/usr/bin/rkhunter' 
    try:
        content = open('/etc/rkhunter.conf').read()
        if not re.match('^DISABLE_TESTS=.*(hashes.*attributes|attributes.*hashes|properties)', content) or re.match('^ENABLE_TESTS=.*(hashes|attributes|properties)', content):
            active = True
    except:
        pass
    if active and os.path.isfile(exe):
        conduit.info(2, 'running rkhunter check')
        command = '%s --check --report-warnings-only' % exe
        if os.system(command) != 0:
            raise Exception('rkhunter POSITIVE')
        else:
            conduit.info(2, 'rkhunter OK')

def posttrans_hook(conduit):
    global active
    exe = '/usr/bin/rkhunter'
    if active and os.path.isfile(exe):
        conduit.info(2, 'running rkhunter --propupd')
        command = '%s --propupd --pkgmgr RPM --nolog ' % exe
        os.system(command)