Date: Thu, 31 Jan 2002 11:23:02 -0200 (BRST) From: Luiz Eduardo Roncato Cordeiro <cordeiro@iqm.unicamp.br> To: FreeBSD-gnats-submit@freebsd.org Cc: jessen@nic.br, nelson@pangeia.com.br, cordeiro@panic.iqm.unicamp.br Subject: ports/34485: Update port: security/chkrootkit: upgrade to version 0.35 Message-ID: <20020131132302.BA8D2D655@panic.iqm.unicamp.br>
next in thread | raw e-mail | index | archive | help
>Number: 34485 >Category: ports >Synopsis: Update port: security/chkrootkit: upgrade to version 0.35 >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-ports >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Thu Jan 31 05:30:01 PST 2002 >Closed-Date: >Last-Modified: >Originator: Luiz Eduardo Roncato Cordeiro >Release: FreeBSD 4.4-STABLE i386 >Organization: >Environment: System: FreeBSD panic.iqm.unicamp.br 4.4-STABLE FreeBSD 4.4-STABLE #36: Fri Sep 21 14:37:05 BRT 2001 cordeiro@panic.iqm.unicamp.br:/usr/src/sys/compile/PANIC i386 >Description: Upgrade from chrootkit 0.34 to chkrootkit 0.35. >How-To-Repeat: >Fix: diff -ruN chkrootkit.bak/Makefile chkrootkit/Makefile --- chkrootkit.bak/Makefile Thu Jan 31 10:51:54 2002 +++ chkrootkit/Makefile Thu Jan 31 11:01:42 2002 @@ -6,7 +6,7 @@ # PORTNAME= chkrootkit -PORTVERSION= 0.34 +PORTVERSION= 0.35 CATEGORIES= security MASTER_SITES= ftp://ftp.pangeia.com.br/pub/seg/pac/ diff -ruN chkrootkit.bak/distinfo chkrootkit/distinfo --- chkrootkit.bak/distinfo Thu Jan 31 10:51:54 2002 +++ chkrootkit/distinfo Thu Jan 31 10:54:10 2002 @@ -1 +1 @@ -MD5 (chkrootkit-0.34.tar.gz) = 3dea2c29537d086e85134c600b38bc3b +MD5 (chkrootkit-0.35.tar.gz) = edf50a9c8c6bf09b0a9147f2e6168826 diff -ruN chkrootkit.bak/pkg-descr chkrootkit/pkg-descr --- chkrootkit.bak/pkg-descr Thu Jan 31 10:51:54 2002 +++ chkrootkit/pkg-descr Thu Jan 31 11:07:32 2002 @@ -1,27 +1,17 @@ -Chkrootkit is a tool to locally check for signs of a rootkit. It -contains: - - * chkrootkit: a shell script that checks system binaries for - rootkit modification. - - * ifpromisc.c: checks if the network interface is in promiscuous - mode. - - * chklastlog.c: checks for lastlog deletions. - - * chkwtmp.c: checks for wtmp deletions. - - * check_wtmpx.c: checks for wtmpx deletions. (Solaris only) - - * chkproc.c: checks for signs of LKM trojans. + Chkrootkit is a tool to locally check for signs of a rootkit. + ------------------------------------------------------------- + + Rootkits, Worms and LKMs detected + --------------------------------- The following rootkits, worms and LKMs are currently detected: Solaris rootkit, FreeBSD rootkit, lrk3, lrk4, lrk5, lrk6, t0rn (and t0rn v8), some lrk variants, Ambient's Rootkit for Linux (ARK), Ramen Worm, rh[67]-shaper, RSHA, Romanian rootkit, RK17, Lion Worm, Adore Worm, LPD Worm, kenny-rk, Adore LKM, ShitC Worm, Omega Worm, Wormkit - Worm, dsc-rootkit. - + Worm, dsc-rootkit, RST.b, duarawkz, knark LKM, Monkit, Hidrootkit, + Bobkit, Pizdakit, t0rn (v8.0 variant). + Nelson Murilo <nelson@pangeia.com.br> WWW: http://www.chkrootkit.org/ >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020131132302.BA8D2D655>