--- chkrootkit-0.45/chkrootkit~ 2005-02-22 13:57:31.000000000 +0100 +++ chkrootkit-0.45/chkrootkit 2005-02-23 16:06:28.882194672 +0100 @@ -149,23 +149,23 @@ fi if [ "${EXPERT}" = "t" ]; then - expertmode_output "./ifpromisc" -v + expertmode_output "/usr/bin/chkrootkit-ifpromisc" -v return 5 fi - if [ ! -x ./ifpromisc ]; then - echo "not tested: can't exec ./ifpromisc" + if [ ! -x /usr/bin/chkrootkit-ifpromisc ]; then + echo "not tested: can't exec /usr/bin/chkrootkit-ifpromisc" return ${NOT_TESTED} else - [ "${QUIET}" != "t" ] && ./ifpromisc -v || ./ifpromisc -q + [ "${QUIET}" != "t" ] && /usr/bin/chkrootkit-ifpromisc -v || /usr/bin/chkrootkit-ifpromisc -q fi } chkutmp() { - if [ ! -x ./chkutmp ]; then - echo "not tested: can't exec ./chkutmp" + if [ ! -x /usr/bin/chkrootkit-chkutmp ]; then + echo "not tested: can't exec /usr/bin/chkrootkit-chkutmp" return ${NOT_TESTED} fi - if ./chkutmp + if /usr/bin/chkrootkit-chkutmp then if [ "${QUIET}" != "t" ]; then echo "chkutmp: nothing deleted"; fi fi @@ -173,8 +173,8 @@ } z2 () { - if [ ! -x ./chklastlog ]; then - echo "not tested: can't exec ./chklastlog" + if [ ! -x /usr/bin/chkrootkit-chklastlog ]; then + echo "not tested: can't exec /usr/bin/chkrootkit-chklastlog" return ${NOT_TESTED} fi @@ -187,32 +187,32 @@ fi if [ "${EXPERT}" = "t" ]; then - expertmode_output "./chklastlog -f ${WTMP} -l ${LASTLOG}" + expertmode_output "/usr/bin/chkrootkit-chklastlog -f ${WTMP} -l ${LASTLOG}" return 5 fi - if ./chklastlog -f ${WTMP} -l ${LASTLOG} + if /usr/bin/chkrootkit-chklastlog -f ${WTMP} -l ${LASTLOG} then if [ "${QUIET}" != "t" ]; then echo "chklastlog: nothing deleted"; fi fi } wted () { - if [ ! -x ./chkwtmp ]; then - echo "not tested: can't exec ./chkwtmp" + if [ ! -x /usr/bin/chkrootkit-chkwtmp ]; then + echo "not tested: can't exec /usr/bin/chkrootkit-chkwtmp" return ${NOT_TESTED} fi if [ "$SYSTEM" = "SunOS" ]; then - if [ ! -x ./check_wtmpx ]; then - echo "not tested: can't exec ./check_wtmpx" + if [ ! -x /usr/bin/chkrootkit-check_wtmpx ]; then + echo "not tested: can't exec /usr/bin/chkrootkit-check_wtmpx" else if [ "${EXPERT}" = "t" ]; then - expertmode_output "./check_wtmpx" + expertmode_output "/usr/bin/chkrootkit-check_wtmpx" return 5 fi if [ -f ${ROOTDIR}var/adm/wtmp ]; then - if ./check_wtmpx + if /usr/bin/chkrootkit-check_wtmpx then if [ "${QUIET}" != "t" ]; then \ echo "check_wtmpx: nothing deleted in /var/adm/wtmpx"; fi @@ -223,12 +223,12 @@ WTMP=`loc wtmp wtmp "${ROOTDIR}var/log ${ROOTDIR}var/adm"` if [ "${EXPERT}" = "t" ]; then - expertmode_output "./chkwtmp -f ${WTMP}" + expertmode_output "/usr/bin/chkrootkit-chkwtmp -f ${WTMP}" return 5 fi fi - if ./chkwtmp -f ${WTMP} + if /usr/bin/chkrootkit-chkwtmp -f ${WTMP} then if [ "${QUIET}" != "t" ]; then echo "chkwtmp: nothing deleted"; fi fi @@ -267,8 +267,8 @@ prog="" if [ \( "${SYSTEM}" = "Linux" -o \( "${SYSTEM}" = "FreeBSD" -a \ `echo ${V} | ${awk} '{ if ($1 > 4.3) print 1; else print 0 }'` -eq 1 \) \) -a "${ROOTDIR}" = "/" ]; then - [ ! -x ./chkproc ] && prog="./chkproc" - [ ! -x ./chkdirs ] && prog="$prog ./chkdirs" + [ ! -x /usr/bin/chkrootkit-chkproc ] && prog="/usr/bin/chkrootkit-chkproc" + [ ! -x /usr/bin/chkrootkit-chkdirs ] && prog="$prog /usr/bin/chkrootkit-chkdirs" if [ "$prog" != "" ]; then # echo "not tested: can't exec $prog" return ${NOT_TESTED} @@ -280,7 +280,7 @@ PV=`$ps -V 2>/dev/null| $cut -d " " -f 3 |$awk -F . '{ print $1 "." $2 $3 }' | ${awk} '{ if ($0 > 3.19) print 2; else print 1 }'` [ "$PV" = "" ] && PV=1 [ "${SYSTEM}" = "SunOS" ] && PV=0 - expertmode_output "./chkproc -v -v -p $PV" + expertmode_output "/usr/bin/chkrootkit-chkproc -v -v -p $PV" return 5 fi @@ -306,7 +306,7 @@ if [ "${DEBUG}" = "t" ]; then ${echo} "*** PV=$PV ***" fi - if ./chkproc -p ${PV} + if /usr/bin/chkrootkit-chkproc -p ${PV} then if [ "${QUIET}" != "t" ]; then echo "chkproc: nothing detected"; fi else @@ -1582,18 +1582,18 @@ if [ "${SYSTEM}" = "Linux" ] then - if [ ! -x ./strings-static ]; then - printn "can't exec ./strings-static, " + if [ ! -x /usr/bin/chkrootkit-strings-static ]; then + printn "can't exec /usr/bin/chkrootkit-strings-static, " return ${NOT_TESTED} fi if [ "${EXPERT}" = "t" ]; then - expertmode_output "./strings-static -a ${CMD}" + expertmode_output "/usr/bin/chkrootkit-strings-static -a ${CMD}" return 5 fi ### strings must be a statically linked binary. - if ./strings-static -a ${CMD} > /dev/null 2>&1 + if /usr/bin/chkrootkit-strings-static -a ${CMD} > /dev/null 2>&1 then STATUS=${INFECTED} fi