-diff -burN chkrootkit-0.42.orig/chkrootkit chkrootkit-0.42/chkrootkit
---- chkrootkit-0.42.orig/chkrootkit 2003-09-15 09:05:41.342646240 +0200
-+++ chkrootkit-0.42/chkrootkit 2003-09-15 09:11:40.081109704 +0200
-@@ -151,15 +151,15 @@
+--- chkrootkit-0.45/chkrootkit~ 2005-02-22 13:57:31.000000000 +0100
++++ chkrootkit-0.45/chkrootkit 2005-02-23 16:06:28.882194672 +0100
+@@ -149,23 +149,23 @@
fi
if [ "${EXPERT}" = "t" ]; then
-- expertmode_output "./ifpromisc"
-+ expertmode_output "/usr/bin/chkrootkit-ifpromisc"
+- expertmode_output "./ifpromisc" -v
++ expertmode_output "/usr/bin/chkrootkit-ifpromisc" -v
return 5
fi
- if [ ! -f ${ROOTDIR}proc/net/packet ]; then
-- if [ ! -x ./ifpromisc ]; then
-- echo "not tested: can't exec ./ifpromisc"
-+ if [ ! -x /usr/bin/chkrootkit-ifpromisc ]; then
-+ echo "not tested: can't exec /usr/bin/chkrootkit-ifpromisc"
- return ${NOT_TESTED}
- fi
-- [ "${QUIET}" != "t" ] && ./ifpromisc || ./ifpromisc -q
-+ [ "${QUIET}" != "t" ] && /usr/bin/chkrootkit-ifpromisc || /usr/bin/chkrootkit-ifpromisc -q
+- if [ ! -x ./ifpromisc ]; then
+- echo "not tested: can't exec ./ifpromisc"
++ if [ ! -x /usr/bin/chkrootkit-ifpromisc ]; then
++ echo "not tested: can't exec /usr/bin/chkrootkit-ifpromisc"
+ return ${NOT_TESTED}
else
- if [ `${egrep} -cv "sk" ${ROOTDIR}proc/net/packet 2>/dev/null` -gt 0 ]; then
- set `${egrep} ":" $ROOTDIR/proc/net/dev | ${egrep} -v "lo:" | cut -f 1 -d:`
-@@ -174,8 +174,8 @@
+- [ "${QUIET}" != "t" ] && ./ifpromisc -v || ./ifpromisc -q
++ [ "${QUIET}" != "t" ] && /usr/bin/chkrootkit-ifpromisc -v || /usr/bin/chkrootkit-ifpromisc -q
+ fi
+ }
+
+ chkutmp() {
+- if [ ! -x ./chkutmp ]; then
+- echo "not tested: can't exec ./chkutmp"
++ if [ ! -x /usr/bin/chkrootkit-chkutmp ]; then
++ echo "not tested: can't exec /usr/bin/chkrootkit-chkutmp"
+ return ${NOT_TESTED}
+ fi
+- if ./chkutmp
++ if /usr/bin/chkrootkit-chkutmp
+ then
+ if [ "${QUIET}" != "t" ]; then echo "chkutmp: nothing deleted"; fi
+ fi
+@@ -173,8 +173,8 @@
}
z2 () {
return ${NOT_TESTED}
fi
-@@ -183,31 +183,31 @@
- LASTLOG=`loc lastlog lastlog "${ROOTDIR}var/log ${ROOTDIR}var/adm"`
+@@ -187,32 +187,32 @@
+ fi
if [ "${EXPERT}" = "t" ]; then
- expertmode_output "./chklastlog -f ${WTMP} -l ${LASTLOG}"
- if ./chklastlog -f ${WTMP} -l ${LASTLOG}
+ if /usr/bin/chkrootkit-chklastlog -f ${WTMP} -l ${LASTLOG}
then
- if [ "${QUIET}" != "t" ]; then echo "nothing deleted"; fi
+ if [ "${QUIET}" != "t" ]; then echo "chklastlog: nothing deleted"; fi
fi
}
+ expertmode_output "/usr/bin/chkrootkit-check_wtmpx"
return 5
fi
-- if ./check_wtmpx
-+ if /usr/bin/chkrootkit-check_wtmpx
- then
- if [ "${QUIET}" != "t" ]; then \
- echo "nothing deleted in /var/adm/wtmpx"; fi
-@@ -217,12 +217,12 @@
+ if [ -f ${ROOTDIR}var/adm/wtmp ]; then
+- if ./check_wtmpx
++ if /usr/bin/chkrootkit-check_wtmpx
+ then
+ if [ "${QUIET}" != "t" ]; then \
+ echo "check_wtmpx: nothing deleted in /var/adm/wtmpx"; fi
+@@ -223,12 +223,12 @@
WTMP=`loc wtmp wtmp "${ROOTDIR}var/log ${ROOTDIR}var/adm"`
if [ "${EXPERT}" = "t" ]; then
- if ./chkwtmp -f ${WTMP}
+ if /usr/bin/chkrootkit-chkwtmp -f ${WTMP}
then
- if [ "${QUIET}" != "t" ]; then echo "nothing deleted"; fi
+ if [ "${QUIET}" != "t" ]; then echo "chkwtmp: nothing deleted"; fi
fi
-@@ -261,8 +261,8 @@
+@@ -267,8 +267,8 @@
prog=""
if [ \( "${SYSTEM}" = "Linux" -o \( "${SYSTEM}" = "FreeBSD" -a \
- ${V} -gt 43 \) \) -a "${ROOTDIR}" = "/" ]; then
+ `echo ${V} | ${awk} '{ if ($1 > 4.3) print 1; else print 0 }'` -eq 1 \) \) -a "${ROOTDIR}" = "/" ]; then
- [ ! -x ./chkproc ] && prog="./chkproc"
- [ ! -x ./chkdirs ] && prog="$prog ./chkdirs"
+ [ ! -x /usr/bin/chkrootkit-chkproc ] && prog="/usr/bin/chkrootkit-chkproc"
if [ "$prog" != "" ]; then
# echo "not tested: can't exec $prog"
return ${NOT_TESTED}
-@@ -271,7 +271,7 @@
- if [ "${EXPERT}" = "t" ]; then
- [ -r /proc/ksyms ] && ${egrep} -i "adore|sebek" < /proc/ksyms 2>/dev/null
- [ -d /proc/knark ] && ${ls} -la /proc/knark 2> /dev/null
-- expertmode_output "./chkproc -v -v"
-+ expertmode_output "/usr/bin/chkrootkit-chkproc -v -v"
- return 5
+@@ -280,7 +280,7 @@
+ PV=`$ps -V 2>/dev/null| $cut -d " " -f 3 |$awk -F . '{ print $1 "." $2 $3 }' | ${awk} '{ if ($0 > 3.19) print 2; else print 1 }'`
+ [ "$PV" = "" ] && PV=1
+ [ "${SYSTEM}" = "SunOS" ] && PV=0
+- expertmode_output "./chkproc -v -v -p $PV"
++ expertmode_output "/usr/bin/chkrootkit-chkproc -v -v -p $PV"
+ return 5
fi
-@@ -292,7 +292,7 @@
- echo "Warning: Knark LKM installed"
+@@ -306,7 +306,7 @@
+ if [ "${DEBUG}" = "t" ]; then
+ ${echo} "*** PV=$PV ***"
fi
-
-- if ./chkproc
-+ if /usr/bin/chkrootkit-chkproc
+- if ./chkproc -p ${PV}
++ if /usr/bin/chkrootkit-chkproc -p ${PV}
then
- if [ "${QUIET}" != "t" ]; then echo "nothing detected"; fi
+ if [ "${QUIET}" != "t" ]; then echo "chkproc: nothing detected"; fi
else
-@@ -1463,18 +1463,18 @@
+@@ -1582,18 +1582,18 @@
if [ "${SYSTEM}" = "Linux" ]
then
-- if [ ! -x ./strings ]; then
+- if [ ! -x ./strings-static ]; then
- printn "can't exec ./strings-static, "
-+ if [ ! -x /usr/bin/chkrootkit-strings ]; then
++ if [ ! -x /usr/bin/chkrootkit-strings-static ]; then
+ printn "can't exec /usr/bin/chkrootkit-strings-static, "
return ${NOT_TESTED}
fi
if [ "${EXPERT}" = "t" ]; then
-- expertmode_output "./strings -a ${CMD}"
-+ expertmode_output "/usr/bin/chkrootkit-strings -a ${CMD}"
+- expertmode_output "./strings-static -a ${CMD}"
++ expertmode_output "/usr/bin/chkrootkit-strings-static -a ${CMD}"
return 5
fi