From owner-freebsd-security@freebsd.org Fri Aug 14 11:19:09 2015 Return-Path: Delivered-To: freebsd-security@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7F0789B89CB for ; Fri, 14 Aug 2015 11:19:09 +0000 (UTC) (envelope-from starikarp@yandex.com) Received: from forward16p.cmail.yandex.net (forward16p.cmail.yandex.net [IPv6:2a02:6b8:0:1465::bf]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "forwards.mail.yandex.net", Issuer "Certum Level IV CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 33D731C12 for ; Fri, 14 Aug 2015 11:19:08 +0000 (UTC) (envelope-from starikarp@yandex.com) Received: from smtp19.mail.yandex.net (smtp19.mail.yandex.net [95.108.252.19]) by forward16p.cmail.yandex.net (Yandex) with ESMTP id 25D4F21666 for ; Fri, 14 Aug 2015 14:18:57 +0300 (MSK) Received: from smtp19.mail.yandex.net (localhost [127.0.0.1]) by smtp19.mail.yandex.net (Yandex) with ESMTP id 0206FBE0114 for ; Fri, 14 Aug 2015 14:18:56 +0300 (MSK) Received: by smtp19.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id H5L5fNNqlB-ItaaASog; Fri, 14 Aug 2015 14:18:56 +0300 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client certificate not present) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.com; s=mail; t=1439551136; bh=3QJVFWgoM2sejvzS4jrNN2EweXv464JCfyu5BvE9/LY=; h=Message-ID:Subject:From:To:Date:Content-Type:X-Mailer: Mime-Version:Content-Transfer-Encoding; b=j6DAc+KbJ4TyrK2Jwu34o7GyW8aAAM1oWByXQ0bUxfMNudk5JPJH8pazNBMc8g8Z+ 8gmyTQkjvXmng6GGDJJnBqFhyy0oyBPJKJUVi/zGobjDjeiYeo8KpaP9+uH+XdelrX eAdoz8TqNaVscQvlKKRu9Cpa3etiB+gMuldl+e0I= Authentication-Results: smtp19.mail.yandex.net; dkim=pass header.i=@yandex.com Message-ID: <1439551130.1961.5.camel@yandex.com> Subject: rkhunter - GET From: Stari Karp To: FreeBSD-Security Date: Fri, 14 Aug 2015 07:18:50 -0400 Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.16.4 FreeBSD GNOME Team Port Mime-Version: 1.0 Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Aug 2015 11:19:09 -0000 Hi! My system (updated today from FreeBSD 10.1-RELEASE): FreeBSD 10.2-RELEASE #0 r286666: Wed Aug 12 15:26:37 UTC 2015 root@releng1.nyi.freebsd.org:/usr/obj/usr/src/sys/GENERIC amd64 I did run rkhunter -c today and I have one warning which I am confused: [06:36:50] Warning: The command '/usr/local/bin/GET' has been replaced by a script: /usr/local/bin/GET: a /usr/local/bin/perl -w script, ASCII text executable The file GET has date February 18 and size is 15071 It started with: #!/usr/local/bin/perl -w eval 'exec /usr/local/bin/perl -w -S $0 ${1+"$@"}' if 0; # not running under some shell # Simple user agent using LWP library. =head1 NAME lwp-request, GET, POST, HEAD - Simple command line user agent =head1 SYNOPSIS B [B<-afPuUsSedvhx>] [B<-m> I] [B<-b> I] [B<-t> I] [B<-i> I] [B<-c> I] [B<-C> I] [B<-p> I] [B<-o> I] I... =head1 DESCRIPTION This program can be used to send requests to WWW servers and your local file system. The request content for POST and PUT methods is read from stdin. The content of the response is printed on stdout. Error messages are printed on stderr. The program returns a status value indicating the number of URLs that failed. The options are: =over 4 =item -m Set which method to use for the request. If this option is not used, then the method is derived from the name of the program. =item -f Force request through, even if the program believes that the method is illegal. The server might reject the request eventually. =item -b This URI will be used as the base URI for resolving all relative URIs given as argument. =item -t Set the timeout value for the requests. The timeout is the amount of time that the program will wait for a response from the remote server before it fails. The default unit for the timeout value is seconds. You might append "m" or "h" to the timeout value to make it minutes or hours, respectively. The default timeout is '3m', i.e. 3 minutes. =item -i