From owner-freebsd-ports-bugs@FreeBSD.ORG Fri Nov 24 14:40:21 2006 Return-Path: X-Original-To: freebsd-ports-bugs@hub.freebsd.org Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 1F45016A412 for ; Fri, 24 Nov 2006 14:40:21 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [69.147.83.40]) by mx1.FreeBSD.org (Postfix) with ESMTP id B65D343D5A for ; Fri, 24 Nov 2006 14:39:37 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id kAOEeJ4K060171 for ; Fri, 24 Nov 2006 14:40:19 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.4/8.13.4/Submit) id kAOEeJoH060167; Fri, 24 Nov 2006 14:40:19 GMT (envelope-from gnats) Resent-Date: Fri, 24 Nov 2006 14:40:19 GMT Resent-Message-Id: <200611241440.kAOEeJoH060167@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Luiz Eduardo Roncato Cordeiro Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 00FFC16A40F for ; Fri, 24 Nov 2006 14:38:35 +0000 (UTC) (envelope-from cordeiro@cert.br) Received: from woq.cert.br (woq.cert.br [200.160.7.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id C66CF43D5A for ; Fri, 24 Nov 2006 14:37:52 +0000 (GMT) (envelope-from cordeiro@cert.br) Received: from luinil.cert.br (luinil.cert.br [200.160.7.67]) by woq.cert.br (Postfix) with ESMTP id 6381D224752; Fri, 24 Nov 2006 12:38:32 -0200 (BRST) Received: by luinil.cert.br (Postfix, from userid 1400) id 2F8BA5C06D; Fri, 24 Nov 2006 12:38:32 -0200 (BRST) Message-Id: <20061124143832.2F8BA5C06D@luinil.cert.br> Date: Fri, 24 Nov 2006 12:38:32 -0200 (BRST) From: Luiz Eduardo Roncato Cordeiro To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: cordeiro@cert.br Subject: ports/105816: update to version 0.47 plus patches X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Luiz Eduardo Roncato Cordeiro List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Nov 2006 14:40:21 -0000 >Number: 105816 >Category: ports >Synopsis: update to version 0.47 plus patches >Confidential: no >Severity: non-critical >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Fri Nov 24 14:40:18 GMT 2006 >Closed-Date: >Last-Modified: >Originator: Luiz Eduardo Roncato Cordeiro >Release: FreeBSD 6.1-RELEASE-p10 i386 >Organization: - >Environment: System: FreeBSD XXXX 6.1-RELEASE-p10 FreeBSD 6.1-RELEASE-p10 #14: Mon Oct 2 13:32:37 BRT 2006 root@XXXX i386 >Description: Update to chkrookit version 0.47 * chkproc.c - some bug fixes, thanks to Lantz Moore - [REMOVED DUE FALSE POSITIVES] use of getpriority() to identify LKMs, thanks to Yjesus(unhide) and Slider/Flimbo (skdet) - new rootkit detected: Enye LKM * chkrootkit - new test: crontab - new rootkits detected: Enye LKM, Lupper.Worm, shv5 - more ports added to the bindshell test - some minor bug fixes >How-To-Repeat: >Fix: diff -ruN /usr/ports/security/chkrootkit.old/Makefile /usr/ports/security/chkrootkit/Makefile --- /usr/ports/security/chkrootkit.old/Makefile Tue Oct 17 15:45:08 2006 +++ /usr/ports/security/chkrootkit/Makefile Fri Nov 24 12:29:20 2006 @@ -6,7 +6,7 @@ # PORTNAME= chkrootkit -PORTVERSION= 0.46a +PORTVERSION= 0.47 CATEGORIES= security MASTER_SITES= ftp://ftp.pangeia.com.br/pub/seg/pac/ \ ftp://gd.tuwien.ac.at/infosys/security/chkrootkit/ \ @@ -30,6 +30,26 @@ BINMODE= 0700 +.include + +.if ${OSVERSION} >= 600000 + +EXTRA_PATCHES= ${PATCHDIR}/600000-patch-chkproc.c + +pre-everything:: + @${ECHO_CMD} "######################################################################" + @${ECHO_CMD} "#" + @${ECHO_CMD} "# WARNING: chkproc process gives false positives values on" + @${ECHO_CMD} "# FreeBSD >= 6.x, and, due this fact, the getpriority code" + @${ECHO_CMD} "# added to identify LKMs was removed." + @${ECHO_CMD} "# So, use with caution." + @${ECHO_CMD} "#" + @${ECHO_CMD} "# This error will be fixed in the next chkrootkit version." + @${ECHO_CMD} "#" + @${ECHO_CMD} "######################################################################" + +.endif + pre-patch: ${REINPLACE_CMD} -e "s/^CC/#CC/; s/^CFLAGS/#CFLAGS/" ${WRKSRC}/Makefile ${REINPLACE_CMD} -e \ @@ -58,4 +78,4 @@ ${INSTALL_DATA} ${PORTDOCS:C,^,${WRKSRC}/,} ${DOCSDIR} .endif -.include +.include diff -ruN /usr/ports/security/chkrootkit.old/distinfo /usr/ports/security/chkrootkit/distinfo --- /usr/ports/security/chkrootkit.old/distinfo Tue Oct 17 15:45:08 2006 +++ /usr/ports/security/chkrootkit/distinfo Fri Nov 10 09:41:59 2006 @@ -1,3 +1,3 @@ -MD5 (chkrootkit-0.46a.tar.gz) = b73fb9e365d2edcd031d65b16e965a18 -SHA256 (chkrootkit-0.46a.tar.gz) = ec23b4be57e08f6c28f646a447a8545f9c612fd4b296133ac9c3c3ac13e1d696 -SIZE (chkrootkit-0.46a.tar.gz) = 37140 +MD5 (chkrootkit-0.47.tar.gz) = 4c6455d202cef35395a673386e4bf01a +SHA256 (chkrootkit-0.47.tar.gz) = 5a5aeb597769cc2843648858b95fc7abd3485ba7edd1800d69e0125220c6669f +SIZE (chkrootkit-0.47.tar.gz) = 37791 diff -ruN /usr/ports/security/chkrootkit.old/files/600000-patch-chkproc.c /usr/ports/security/chkrootkit/files/600000-patch-chkproc.c --- /usr/ports/security/chkrootkit.old/files/600000-patch-chkproc.c Wed Dec 31 21:00:00 1969 +++ /usr/ports/security/chkrootkit/files/600000-patch-chkproc.c Fri Nov 24 12:09:18 2006 @@ -0,0 +1,21 @@ +--- chkproc.c.orig Fri Nov 24 12:03:25 2006 ++++ chkproc.c Fri Nov 24 12:04:43 2006 +@@ -334,18 +334,6 @@ + } + #endif + } +- else +- { +- errno = 0; +- getpriority(PRIO_PROCESS, i); +- if (!errno) +- { +- retdir++; +- if (verbose) +- printf ("PID %5d(%s): not in getpriority readdir output\n", i, buf); +- } +- } +- + } + if (retdir) + printf("You have % 5d process hidden for readdir command\n", retdir); >Release-Note: >Audit-Trail: >Unformatted: