From owner-freebsd-security@freebsd.org Fri Aug 14 13:34:47 2015 Return-Path: Delivered-To: freebsd-security@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DD8189B8EC6 for ; Fri, 14 Aug 2015 13:34:46 +0000 (UTC) (envelope-from hassane@hyjazi.me) Received: from 1.mo6.mail-out.ovh.net (1.mo6.mail-out.ovh.net [46.105.56.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 78E8D1D62 for ; Fri, 14 Aug 2015 13:34:45 +0000 (UTC) (envelope-from hassane@hyjazi.me) Received: from mail407.ha.ovh.net (gw6.ovh.net [213.251.189.206]) by mo6.mail-out.ovh.net (Postfix) with SMTP id 5CE53FF92FB for ; Fri, 14 Aug 2015 14:56:42 +0200 (CEST) Received: from localhost (HELO queueout) (127.0.0.1) by localhost with SMTP; 14 Aug 2015 14:56:41 +0200 Received: from unknown (HELO ?127.0.0.1?) (hassane@hyjazi.me@41.250.6.133) by ns0.ovh.net with SMTP; 14 Aug 2015 14:56:38 +0200 Message-ID: <55CDE586.6050300@hyjazi.me> Date: Fri, 14 Aug 2015 13:56:38 +0100 From: Hassane HYJAZI User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.7.0 MIME-Version: 1.0 To: freebsd-security@freebsd.org Subject: Re: rkhunter - GET References: <1439551130.1961.5.camel@yandex.com> In-Reply-To: <1439551130.1961.5.camel@yandex.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 16538906683515613810 X-Ovh-Remote: 41.250.6.133 () X-Ovh-Local: 213.186.33.20 (ns0.ovh.net) X-OVH-SPAMSTATE: OK X-OVH-SPAMSCORE: 0 X-OVH-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrfeekfedrfeekucetufdoteggucfrrhhofhhilhgvmecuqfggjfenuceurghilhhouhhtmecufedttdenuc X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrfeekfedrfeekucetufdoteggucfrrhhofhhilhgvmecuqfggjfenuceurghilhhouhhtmecufedttdenuc X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Aug 2015 13:34:47 -0000 probably the update make changes to it (or created it if u was updating from 9.x), and rkhunter noticed. compare it with the original file from 10.2-RELEASE in doubt. Le 14/08/2015 12:18, Stari Karp a écrit : > Hi! > > My system (updated today from FreeBSD 10.1-RELEASE): > > FreeBSD 10.2-RELEASE #0 r286666: Wed Aug 12 15:26:37 UTC 2015 > root@releng1.nyi.freebsd.org:/usr/obj/usr/src/sys/GENERIC amd64 > > > I did run rkhunter -c today and I have one warning which I am confused: > > [06:36:50] Warning: The command '/usr/local/bin/GET' has been replaced > by a script: /usr/local/bin/GET: a /usr/local/bin/perl -w script, ASCII > text executable > > The file GET has date February 18 and size is 15071 > > It started with: > #!/usr/local/bin/perl -w > > eval 'exec /usr/local/bin/perl -w -S $0 ${1+"$@"}' > if 0; # not running under some shell > > # Simple user agent using LWP library. > > =head1 NAME > > lwp-request, GET, POST, HEAD - Simple command line user agent > > =head1 SYNOPSIS > > B [B<-afPuUsSedvhx>] [B<-m> I] [B<-b> I] > [B<-t> I] > [B<-i> I] [B<-c> I] > [B<-C> I] [B<-p> I] [B<-o> > I] I... > > =head1 DESCRIPTION > > This program can be used to send requests to WWW servers and your > local file system. The request content for POST and PUT > methods is read from stdin. The content of the response is printed on > stdout. Error messages are printed on stderr. The program returns a > status value indicating the number of URLs that failed. > > The options are: > > =over 4 > > =item -m > > Set which method to use for the request. If this option is not used, > then the method is derived from the name of the program. > > =item -f > > Force request through, even if the program believes that the method is > illegal. The server might reject the request eventually. > > =item -b > > This URI will be used as the base URI for resolving all relative URIs > given as argument. > > =item -t > > Set the timeout value for the requests. The timeout is the amount of > time that the program will wait for a response from the remote server > before it fails. The default unit for the timeout value is seconds. > You might append "m" or "h" to the timeout value to make it minutes or > hours, respectively. The default timeout is '3m', i.e. 3 minutes. > > =item -i