- created this spec and adapterized.

- one of binaries must be linked staticaly (because of security reasons).
- does rpm strips binaries by itself ?

Changed files:
    chkrootkit.spec -> 1.1

diff --git a/chkrootkit.spec b/chkrootkit.spec
new file mode 100644 (file)
index 0000000..93246ee
--- /dev/null
+++ b/chkrootkit.spec
@@ -0,0 +1,71 @@
+Summary:       chkrootkit - locally checks for signs of a rootkit
+Summary(pl):   chkrootkit - szuka lokalnie oznak rootkit'ów
+Name:          chkrootkit
+Version:       0.35
+Release:       1
+License:       Copyrighted
+Group:         Applications/Networking
+Group(cs):     Aplikace/Sí»ové
+Group(da):     Programmer/Netværks
+Group(de):     Applikationen/Netzwerkwesen
+Group(es):     Aplicaciones/Red
+Group(fr):     Applications/Réseau
+Group(is):     Forrit/Net
+Group(it):     Applicazioni/Rete
+Group(no):     Applikasjoner/Nettverk
+Group(pl):     Aplikacje/Sieciowe
+Group(pt):     Aplicações/Rede
+Group(pt_BR):  Aplicações/Rede
+Group(ru):     ðÒÉÌÏÖÅÎÉÑ/óÅÔÅ×ÙÅ
+Group(sl):     Programi/Omre¾ni
+Group(sv):     Tillämpningar/Nätverk
+Source0:       ftp://ftp://sunsite.icm.edu.pl/pub/unix/security/chkrootkit/%{name}-%{version}.tar.gz
+URL:           http://www.chkrootkit.org/
+BuildRoot:     %{tmpdir}/%{name}-%{version}-root-%(id -u -n)
+
+%description
+Chkrootkit is a toolkit to locally check for signs of a rootkit.
+ - chkrootkit: a shell script that checks system binaries for rootkit
+   modification. (If you can't trust rpm -Va)
+ - ifpromisc: checks if the network interface is in promiscuous mode.
+   (If you can't trust netstat)
+ - chklastlog: checks for lastlog deletions.
+ - chkwtmp: checks for wtmp deletions.
+ - check_wtmpx: checks for wtmpx deletions. (Solaris only)
+ - chkproc: checks for signs of LKM trojans. (kernel modules)
+ - strings: quick and dirty strings replacement.
+
+%description -l pl
+Chkrootkit to zespó³ narzêdzi do lokalnego sprawdzania oznak u¿ycia
+rootkitów.
+ - chkrootkit: skrypt bash sprawdzaj±cy binarne pliki systemowe na
+   obecno¶æ modyfikacji typowych dla rootkitów. (Je¶li nie mo¿na zaufaæ
+   rpm -Va)
+ - ifpromisc: sprawdza czy interfejs sieciowy jest w trybie promiscuous
+   (gdy nie mo¿na zaufaæ netstat)
+ - chklastlog: sprawdza czy logi nie by³y kasowane.
+ - chkwtmp: sprawdza kasowanie wtmpx.
+ - check_wtmpx: sprawdza kasowanie w wtmpx deletions. (tylko Solaris)
+ - chkproc: szuka oznak trojanów LKM. (modu³y j±dra)
+ - strings: szybkie i brzydkie podmiany ci±gów znaków.
+
+
+%prep
+%setup -q
+
+%build
+%{__make} sense
+
+%install
+rm -rf $RPM_BUILD_ROOT
+install -d $RPM_BUILD_ROOT/%{_bindir}
+install {check_wtmpx,chklastlog,chkproc,chkrootkit,chkwtmp,ifpromisc,strings} $RPM_BUILD_ROOT/%{_bindir}
+gzip -9nf COPYRIGHT README README.chklastlog README.chkwtmp
+
+%clean
+rm -rf $RPM_BUILD_ROOT
+
+%files
+%defattr(644,root,root,755)
+%doc *.gz
+%attr(755,root,root) %{_bindir}/*