chkrootkit-names.patch

   1 diff -burN chkrootkit-0.42.orig/chkrootkit chkrootkit-0.42/chkrootkit
   2 --- chkrootkit-0.42.orig/chkrootkit     2003-09-15 09:05:41.342646240 +0200
   3 +++ chkrootkit-0.42/chkrootkit  2003-09-15 09:11:40.081109704 +0200
   4 @@ -151,15 +151,15 @@
   5      fi
   6
   7      if [ "${EXPERT}" = "t" ]; then
   8 -        expertmode_output "./ifpromisc"
   9 +        expertmode_output "/usr/bin/chkrootkit-ifpromisc"
  10          return 5
  11      fi
  12      if [ ! -f ${ROOTDIR}proc/net/packet ]; then
  13 -       if [ ! -x ./ifpromisc ]; then
  14 -         echo "not tested: can't exec ./ifpromisc"
  15 +       if [ ! -x /usr/bin/chkrootkit-ifpromisc ]; then
  16 +         echo "not tested: can't exec /usr/bin/chkrootkit-ifpromisc"
  17           return ${NOT_TESTED}
  18         fi
  19 -       [ "${QUIET}" != "t" ] && ./ifpromisc || ./ifpromisc -q
  20 +       [ "${QUIET}" != "t" ] && /usr/bin/chkrootkit-ifpromisc || /usr/bin/chkrootkit-ifpromisc -q
  21      else
  22         if [ `${egrep} -cv "sk" ${ROOTDIR}proc/net/packet 2>/dev/null` -gt 0 ]; then
  23                set `${egrep} ":" $ROOTDIR/proc/net/dev | ${egrep} -v "lo:" | cut -f 1 -d:`
  24 @@ -174,8 +174,8 @@
  25  }
  26
  27  z2 () {
  28 -    if [ ! -x ./chklastlog ]; then
  29 -      echo "not tested: can't exec ./chklastlog"
  30 +    if [ ! -x /usr/bin/chkrootkit-chklastlog ]; then
  31 +      echo "not tested: can't exec /usr/bin/chkrootkit-chklastlog"
  32        return ${NOT_TESTED}
  33      fi
  34
  35 @@ -183,31 +183,31 @@
  36      LASTLOG=`loc lastlog lastlog "${ROOTDIR}var/log ${ROOTDIR}var/adm"`
  37
  38      if [ "${EXPERT}" = "t" ]; then
  39 -        expertmode_output "./chklastlog -f ${WTMP} -l ${LASTLOG}"
  40 +        expertmode_output "/usr/bin/chkrootkit-chklastlog -f ${WTMP} -l ${LASTLOG}"
  41          return 5
  42      fi
  43
  44 -    if ./chklastlog -f ${WTMP} -l ${LASTLOG}
  45 +    if /usr/bin/chkrootkit-chklastlog -f ${WTMP} -l ${LASTLOG}
  46      then
  47        if [ "${QUIET}" != "t" ]; then echo "nothing deleted"; fi
  48      fi
  49  }
  50
  51  wted () {
  52 -    if [ ! -x ./chkwtmp ]; then
  53 -      echo "not tested: can't exec ./chkwtmp"
  54 +    if [ ! -x /usr/bin/chkrootkit-chkwtmp ]; then
  55 +      echo "not tested: can't exec /usr/bin/chkrootkit-chkwtmp"
  56        return ${NOT_TESTED}
  57      fi
  58
  59     if [ "$SYSTEM" = "SunOS" ]; then
  60 -       if [ ! -x ./check_wtmpx ]; then
  61 -          echo "not tested: can't exec ./check_wtmpx"
  62 +       if [ ! -x /usr/bin/chkrootkit-check_wtmpx ]; then
  63 +          echo "not tested: can't exec /usr/bin/chkrootkit-check_wtmpx"
  64         else
  65            if [ "${EXPERT}" = "t" ]; then
  66 -             expertmode_output "./check_wtmpx"
  67 +             expertmode_output "/usr/bin/chkrootkit-check_wtmpx"
  68                return 5
  69            fi
  70 -          if ./check_wtmpx
  71 +          if /usr/bin/chkrootkit-check_wtmpx
  72               then
  73               if [ "${QUIET}" != "t" ]; then \
  74                  echo "nothing deleted in /var/adm/wtmpx"; fi
  75 @@ -217,12 +217,12 @@
  76         WTMP=`loc wtmp wtmp "${ROOTDIR}var/log ${ROOTDIR}var/adm"`
  77
  78         if [ "${EXPERT}" = "t" ]; then
  79 -          expertmode_output "./chkwtmp -f ${WTMP}"
  80 +          expertmode_output "/usr/bin/chkrootkit-chkwtmp -f ${WTMP}"
  81            return 5
  82         fi
  83      fi
  84
  85 -    if ./chkwtmp -f ${WTMP}
  86 +    if /usr/bin/chkrootkit-chkwtmp -f ${WTMP}
  87      then
  88        if [ "${QUIET}" != "t" ]; then echo "nothing deleted"; fi
  89      fi
  90 @@ -261,8 +261,8 @@
  91      prog=""
  92      if [  \( "${SYSTEM}" = "Linux"  -o \( "${SYSTEM}" = "FreeBSD" -a \
  93         ${V} -gt 43 \) \) -a "${ROOTDIR}" = "/" ]; then
  94 -      [ ! -x ./chkproc ] && prog="./chkproc"
  95 -      [ ! -x ./chkdirs ] && prog="$prog ./chkdirs"
  96 +      [ ! -x /usr/bin/chkrootkit-chkproc ] && prog="/usr/bin/chkrootkit-chkproc"
  97 +      [ ! -x /usr/bin/chkrootkit-chkdirs ] && prog="$prog /usr/bin/chkrootkit-chkdirs"
  98        if [ "$prog" != "" ]; then
  99  #        echo "not tested: can't exec $prog"
 100          return ${NOT_TESTED}
 101 @@ -271,7 +271,7 @@
 102        if [ "${EXPERT}" = "t" ]; then
 103           [ -r /proc/ksyms ] &&  ${egrep} -i "adore|sebek" < /proc/ksyms 2>/dev/null
 104           [ -d /proc/knark ] &&  ${ls} -la /proc/knark 2> /dev/null
 105 -          expertmode_output "./chkproc -v -v"
 106 +          expertmode_output "/usr/bin/chkrootkit-chkproc -v -v"
 107            return 5
 108        fi
 109
 110 @@ -292,7 +292,7 @@
 111           echo "Warning: Knark LKM installed"
 112        fi
 113
 114 -      if ./chkproc
 115 +      if /usr/bin/chkrootkit-chkproc
 116        then
 117             if [ "${QUIET}" != "t" ]; then echo "nothing detected"; fi
 118        else
 119 @@ -1463,18 +1463,18 @@
 120
 121     if [ "${SYSTEM}" = "Linux" ]
 122     then
 123 -      if [ ! -x ./strings ]; then
 124 -        printn "can't exec ./strings-static, "
 125 +      if [ ! -x /usr/bin/chkrootkit-strings ]; then
 126 +        printn "can't exec /usr/bin/chkrootkit-strings-static, "
 127          return ${NOT_TESTED}
 128        fi
 129
 130        if [ "${EXPERT}" = "t" ]; then
 131 -          expertmode_output "./strings -a ${CMD}"
 132 +          expertmode_output "/usr/bin/chkrootkit-strings -a ${CMD}"
 133            return 5
 134        fi
 135
 136        ### strings must be a statically linked binary.
 137 -      if ./strings-static -a ${CMD} > /dev/null 2>&1
 138 +      if /usr/bin/chkrootkit-strings-static -a ${CMD} > /dev/null 2>&1
 139        then
 140           STATUS=${INFECTED}
 141        fi