]>
Commit | Line | Data |
---|---|---|
6eecdcbe | 1 | diff -Nur chkrootkit-0.43.orig/chkrootkit chkrootkit-0.43/chkrootkit |
2 | --- chkrootkit-0.43.orig/chkrootkit 2003-12-28 17:48:16.000000000 +0100 | |
3 | +++ chkrootkit-0.43/chkrootkit 2003-12-30 09:09:25.887663096 +0100 | |
4 | @@ -151,20 +151,20 @@ | |
7396ff59 | 5 | fi |
6 | ||
7 | if [ "${EXPERT}" = "t" ]; then | |
6eecdcbe | 8 | - expertmode_output "./ifpromisc" -v |
9 | + expertmode_output "/usr/bin/chkrootkit-ifpromisc" -v | |
7396ff59 | 10 | return 5 |
11 | fi | |
6eecdcbe | 12 | - if [ ! -x ./ifpromisc ]; then |
13 | - echo "not tested: can't exec ./ifpromisc" | |
14 | + if [ ! -x /usr/bin/chkrootkit-ifpromisc ]; then | |
15 | + echo "not tested: can't exec /usr/bin/chkrootkit-ifpromisc" | |
16 | return ${NOT_TESTED} | |
e2cdd59e | 17 | else |
6eecdcbe | 18 | - [ "${QUIET}" != "t" ] && ./ifpromisc -v || ./ifpromisc -q |
19 | + [ "${QUIET}" != "t" ] && /usr/bin/chkrootkit-ifpromisc -v || /usr/bin/chkrootkit-ifpromisc -q | |
20 | fi | |
7396ff59 | 21 | } |
22 | ||
23 | z2 () { | |
24 | - if [ ! -x ./chklastlog ]; then | |
25 | - echo "not tested: can't exec ./chklastlog" | |
cf2a8946 | 26 | + if [ ! -x /usr/bin/chkrootkit-chklastlog ]; then |
27 | + echo "not tested: can't exec /usr/bin/chkrootkit-chklastlog" | |
7396ff59 | 28 | return ${NOT_TESTED} |
29 | fi | |
30 | ||
6eecdcbe | 31 | @@ -178,32 +178,32 @@ |
32 | fi | |
7396ff59 | 33 | |
34 | if [ "${EXPERT}" = "t" ]; then | |
35 | - expertmode_output "./chklastlog -f ${WTMP} -l ${LASTLOG}" | |
cf2a8946 | 36 | + expertmode_output "/usr/bin/chkrootkit-chklastlog -f ${WTMP} -l ${LASTLOG}" |
7396ff59 | 37 | return 5 |
38 | fi | |
39 | ||
40 | - if ./chklastlog -f ${WTMP} -l ${LASTLOG} | |
cf2a8946 | 41 | + if /usr/bin/chkrootkit-chklastlog -f ${WTMP} -l ${LASTLOG} |
7396ff59 | 42 | then |
43 | if [ "${QUIET}" != "t" ]; then echo "nothing deleted"; fi | |
44 | fi | |
45 | } | |
46 | ||
47 | wted () { | |
48 | - if [ ! -x ./chkwtmp ]; then | |
49 | - echo "not tested: can't exec ./chkwtmp" | |
cf2a8946 | 50 | + if [ ! -x /usr/bin/chkrootkit-chkwtmp ]; then |
51 | + echo "not tested: can't exec /usr/bin/chkrootkit-chkwtmp" | |
7396ff59 | 52 | return ${NOT_TESTED} |
53 | fi | |
54 | ||
eb06d3e0 | 55 | if [ "$SYSTEM" = "SunOS" ]; then |
7396ff59 | 56 | - if [ ! -x ./check_wtmpx ]; then |
57 | - echo "not tested: can't exec ./check_wtmpx" | |
cf2a8946 | 58 | + if [ ! -x /usr/bin/chkrootkit-check_wtmpx ]; then |
59 | + echo "not tested: can't exec /usr/bin/chkrootkit-check_wtmpx" | |
7396ff59 | 60 | else |
61 | if [ "${EXPERT}" = "t" ]; then | |
b49a9f40 | 62 | - expertmode_output "./check_wtmpx" |
cf2a8946 | 63 | + expertmode_output "/usr/bin/chkrootkit-check_wtmpx" |
7396ff59 | 64 | return 5 |
65 | fi | |
6eecdcbe | 66 | if [ -f ${ROOTDIR}var/adm/wtmp ]; then |
67 | - if ./check_wtmpx | |
68 | + if /usr/bin/chkrootkit-check_wtmpx | |
69 | then | |
70 | if [ "${QUIET}" != "t" ]; then \ | |
71 | echo "nothing deleted in /var/adm/wtmpx"; fi | |
72 | @@ -214,12 +214,12 @@ | |
eb06d3e0 | 73 | WTMP=`loc wtmp wtmp "${ROOTDIR}var/log ${ROOTDIR}var/adm"` |
7396ff59 | 74 | |
eb06d3e0 | 75 | if [ "${EXPERT}" = "t" ]; then |
76 | - expertmode_output "./chkwtmp -f ${WTMP}" | |
cf2a8946 | 77 | + expertmode_output "/usr/bin/chkrootkit-chkwtmp -f ${WTMP}" |
eb06d3e0 | 78 | return 5 |
79 | fi | |
7396ff59 | 80 | fi |
81 | ||
82 | - if ./chkwtmp -f ${WTMP} | |
cf2a8946 | 83 | + if /usr/bin/chkrootkit-chkwtmp -f ${WTMP} |
7396ff59 | 84 | then |
85 | if [ "${QUIET}" != "t" ]; then echo "nothing deleted"; fi | |
86 | fi | |
6eecdcbe | 87 | @@ -258,8 +258,8 @@ |
abb05b7a | 88 | prog="" |
d8f4eeda | 89 | if [ \( "${SYSTEM}" = "Linux" -o \( "${SYSTEM}" = "FreeBSD" -a \ |
7396ff59 | 90 | ${V} -gt 43 \) \) -a "${ROOTDIR}" = "/" ]; then |
abb05b7a SZ |
91 | - [ ! -x ./chkproc ] && prog="./chkproc" |
92 | - [ ! -x ./chkdirs ] && prog="$prog ./chkdirs" | |
cf2a8946 | 93 | + [ ! -x /usr/bin/chkrootkit-chkproc ] && prog="/usr/bin/chkrootkit-chkproc" |
94 | + [ ! -x /usr/bin/chkrootkit-chkdirs ] && prog="$prog /usr/bin/chkrootkit-chkdirs" | |
abb05b7a SZ |
95 | if [ "$prog" != "" ]; then |
96 | # echo "not tested: can't exec $prog" | |
7396ff59 | 97 | return ${NOT_TESTED} |
6eecdcbe | 98 | @@ -268,7 +268,7 @@ |
7396ff59 | 99 | if [ "${EXPERT}" = "t" ]; then |
abb05b7a | 100 | [ -r /proc/ksyms ] && ${egrep} -i "adore|sebek" < /proc/ksyms 2>/dev/null |
7396ff59 | 101 | [ -d /proc/knark ] && ${ls} -la /proc/knark 2> /dev/null |
eb06d3e0 | 102 | - expertmode_output "./chkproc -v -v" |
cf2a8946 | 103 | + expertmode_output "/usr/bin/chkrootkit-chkproc -v -v" |
7396ff59 | 104 | return 5 |
105 | fi | |
106 | ||
6eecdcbe | 107 | @@ -289,7 +289,7 @@ |
7396ff59 | 108 | echo "Warning: Knark LKM installed" |
109 | fi | |
110 | ||
111 | - if ./chkproc | |
cf2a8946 | 112 | + if /usr/bin/chkrootkit-chkproc |
7396ff59 | 113 | then |
114 | if [ "${QUIET}" != "t" ]; then echo "nothing detected"; fi | |
115 | else | |
6eecdcbe | 116 | @@ -1505,18 +1505,18 @@ |
7396ff59 | 117 | |
118 | if [ "${SYSTEM}" = "Linux" ] | |
119 | then | |
6eecdcbe | 120 | - if [ ! -x ./strings-static ]; then |
b49a9f40 | 121 | - printn "can't exec ./strings-static, " |
cf2a8946 | 122 | + if [ ! -x /usr/bin/chkrootkit-strings ]; then |
6eecdcbe | 123 | + printn "can't exec /usr/bin/chkrootkit-strings, " |
7396ff59 | 124 | return ${NOT_TESTED} |
125 | fi | |
126 | ||
127 | if [ "${EXPERT}" = "t" ]; then | |
128 | - expertmode_output "./strings -a ${CMD}" | |
cf2a8946 | 129 | + expertmode_output "/usr/bin/chkrootkit-strings -a ${CMD}" |
7396ff59 | 130 | return 5 |
131 | fi | |
132 | ||
b49a9f40 | 133 | ### strings must be a statically linked binary. |
6eecdcbe | 134 | - if ./strings-static -a ${CMD} > /dev/null 2>&1 |
5db38116 | 135 | + if /usr/bin/chkrootkit-strings -a ${CMD} > /dev/null 2>&1 |
7396ff59 | 136 | then |
137 | STATUS=${INFECTED} | |
138 | fi | |
6eecdcbe | 139 | diff -Nur chkrootkit-0.43.orig/Makefile chkrootkit-0.43/Makefile |
140 | --- chkrootkit-0.43.orig/Makefile 2003-12-30 09:08:57.815930648 +0100 | |
141 | +++ chkrootkit-0.43/Makefile 2003-12-30 09:09:59.581540848 +0100 | |
142 | @@ -25,13 +25,13 @@ | |
143 | ||
144 | SRCS = chklastlog.c chkwtmp.c ifpromisc.c chkproc.c chkdirs.c check_wtmpx.c strings.c | |
145 | ||
146 | -OBJS = chklastlog.o chkwtmp.o ifpromisc.o chkproc.o chkdirs.o check_wtmpx.o strings-static.o | |
147 | +OBJS = chklastlog.o chkwtmp.o ifpromisc.o chkproc.o chkdirs.o check_wtmpx.o strings.o | |
148 | ||
149 | all: | |
150 | @echo '*** stopping make sense ***' | |
151 | @exec make sense | |
152 | ||
153 | -sense: chklastlog chkwtmp ifpromisc chkproc chkdirs check_wtmpx strings-static | |
154 | +sense: chklastlog chkwtmp ifpromisc chkproc chkdirs check_wtmpx strings | |
155 | ||
156 | chklastlog: chklastlog.c | |
157 | ${CC} ${CFLAGS} -o $@ chklastlog.c | |
158 | @@ -51,8 +51,8 @@ | |
159 | check_wtmpx: check_wtmpx.c | |
160 | ${CC} ${LDFLAGS} -o $@ check_wtmpx.c | |
161 | ||
162 | -strings-static: strings.c | |
163 | +strings: strings.c | |
164 | ${CC} ${STATIC} ${LDFLAGS} -o $@ strings.c | |
165 | ||
166 | clean: | |
167 | - rm -f ${OBJS} core chklastlog chkwtmp ifpromisc chkproc chkdirs check_wtmpx strings-static | |
168 | + rm -f ${OBJS} core chklastlog chkwtmp ifpromisc chkproc chkdirs check_wtmpx strings |