- updated to 0.39a

Changed files:
    chkrootkit-names.patch -> 1.5
    chkrootkit-wtmp.patch -> 1.2
    chkrootkit.spec -> 1.20

diff --git a/chkrootkit-names.patch b/chkrootkit-names.patch
index f77b8d2f18f247bffd4d623f6393025e52f7d592..e2448a106a13aa605c10a2033719a72c52557a14 100644 (file)
--- a/chkrootkit-names.patch
+++ b/chkrootkit-names.patch
@@ -1,32 +1,32 @@
-diff -Naur chkrootkit-0.38/chkrootkit chkrootkit-0.38-p/chkrootkit
---- chkrootkit-0.38/chkrootkit Sat Dec 21 00:03:27 2002
-+++ chkrootkit-0.38-p/chkrootkit       Sat Jan  4 10:13:24 2003
+diff -Nur chkrootkit-0.39a.orig/chkrootkit chkrootkit-0.39a/chkrootkit
+--- chkrootkit-0.39a.orig/chkrootkit   Thu Jan 30 23:45:57 2003
++++ chkrootkit-0.39a/chkrootkit        Sat Feb  8 16:49:10 2003
 @@ -130,22 +130,22 @@
         return ${NOT_TESTED}
      fi
  
 -    if [ ! -x ./ifpromisc ]; then
 -      echo "not tested: can't exec ./ifpromisc"
-+    if [ ! -x /usr/bin/chkrootkit-ifpromisc ]; then
-+      echo "not tested: can't exec /usr/bin/chkrootkit-ifpromisc"
++    if [ ! -x /usr/bin/ifpromisc ]; then
++      echo "not tested: can't exec /usr/bin/ifpromisc"
        return ${NOT_TESTED}
      fi
  
      if [ "${EXPERT}" = "t" ]; then
 -        expertmode_output "./ifpromisc"
-+        expertmode_output "/usr/bin/chkrootkit-ifpromisc"
++        expertmode_output "/usr/bin/ifpromisc"
          return 5
      fi
      echo
 -    ./ifpromisc
-+    /usr/bin/chkrootkit-ifpromisc
++    /usr/bin/ifpromisc
  }
  
  z2 () {
 -    if [ ! -x ./chklastlog ]; then
 -      echo "not tested: can't exec ./chklastlog"
-+    if [ ! -x /usr/bin/chkrootkit-chklastlog ]; then
-+      echo "not tested: can't exec /usr/bin/chkrootkit-chklastlog"
++    if [ ! -x /usr/bin/chklastlog ]; then
++      echo "not tested: can't exec /usr/bin/chklastlog"
        return ${NOT_TESTED}
      fi
  
@@ -35,12 +35,12 @@ diff -Naur chkrootkit-0.38/chkrootkit chkrootkit-0.38-p/chkrootkit
  
      if [ "${EXPERT}" = "t" ]; then
 -        expertmode_output "./chklastlog -f ${WTMP} -l ${LASTLOG}"
-+        expertmode_output "/usr/bin/chkrootkit-chklastlog -f ${WTMP} -l ${LASTLOG}"
++        expertmode_output "/usr/bin/chklastlog -f ${WTMP} -l ${LASTLOG}"
          return 5
      fi
  
 -    if ./chklastlog -f ${WTMP} -l ${LASTLOG}
-+    if /usr/bin/chkrootkit-chklastlog -f ${WTMP} -l ${LASTLOG}
++    if /usr/bin/chklastlog -f ${WTMP} -l ${LASTLOG}
      then
        if [ "${QUIET}" != "t" ]; then echo "nothing deleted"; fi
      fi
@@ -49,91 +49,91 @@ diff -Naur chkrootkit-0.38/chkrootkit chkrootkit-0.38-p/chkrootkit
  wted () {
 -    if [ ! -x ./chkwtmp ]; then
 -      echo "not tested: can't exec ./chkwtmp"
-+    if [ ! -x /usr/bin/chkrootkit-chkwtmp ]; then
-+      echo "not tested: can't exec /usr/bin/chkrootkit-chkwtmp"
++    if [ ! -x /usr/bin/chkwtmp ]; then
++      echo "not tested: can't exec /usr/bin/chkwtmp"
        return ${NOT_TESTED}
      fi
  
-     if [ "$SYSTEM" = "SunOS" ]; then
+    if [ "$SYSTEM" = "SunOS" ]; then
 -       if [ ! -x ./check_wtmpx ]; then
 -          echo "not tested: can't exec ./check_wtmpx"
-+       if [ ! -x /usr/bin/chkrootkit-check_wtmpx ]; then
-+          echo "not tested: can't exec /usr/bin/chkrootkit-check_wtmpx"
++       if [ ! -x /usr/bin/check_wtmpx ]; then
++          echo "not tested: can't exec /usr/bin/check_wtmpx"
         else
            if [ "${EXPERT}" = "t" ]; then
 -             expertmode_output "./check_wtmpx"
-+             expertmode_output "/usr/bin/chkrootkit-check_wtmpx"
++             expertmode_output "/usr/bin/check_wtmpx"
                return 5
            fi
 -          if ./check_wtmpx
-+          if /usr/bin/chkrootkit-check_wtmpx
++          if /usr/bin/check_wtmpx
               then
               if [ "${QUIET}" != "t" ]; then \
                  echo "nothing deleted in /var/adm/wtmpx"; fi
-@@ -188,11 +188,11 @@
-     WTMP=`loc wtmp wtmp "${ROOTDIR}var/log ${ROOTDIR}var/adm"`
+@@ -187,12 +187,12 @@
+        WTMP=`loc wtmp wtmp "${ROOTDIR}var/log ${ROOTDIR}var/adm"`
  
-     if [ "${EXPERT}" = "t" ]; then
--        expertmode_output "./chkwtmp -f ${WTMP}"
-+        expertmode_output "/usr/bin/chkrootkit-chkwtmp -f ${WTMP}"
-         return 5
+        if [ "${EXPERT}" = "t" ]; then
+-          expertmode_output "./chkwtmp -f ${WTMP}"
++          expertmode_output "/usr/bin/chkwtmp -f ${WTMP}"
+           return 5
+        fi
      fi
  
 -    if ./chkwtmp -f ${WTMP}
-+    if /usr/bin/chkrootkit-chkwtmp -f ${WTMP}
++    if /usr/bin/chkwtmp -f ${WTMP}
      then
        if [ "${QUIET}" != "t" ]; then echo "nothing deleted"; fi
      fi
-@@ -231,8 +231,9 @@
+@@ -231,8 +231,8 @@
      prog=""
      if [ \( "${SYSTEM}" = "Linux"  -o \( "${SYSTEM}" = "FreeBSD" -a \
         ${V} -gt 43 \) \) -a "${ROOTDIR}" = "/" ]; then
 -      [ ! -x ./chkproc ] && prog="./chkproc"
 -      [ ! -x ./chkdirs ] && prog="$prog ./chkdirs"
-+      [ ! -x /usr/bin/chkrootkit-chkproc ] && prog="/usr/bin/chkrootkiy-chkproc"
-+      [ ! -x /usr/bin/chkrootkit-chkdirs ] && prog="$prog
-+      /usr/bin/chkrootkit-chkdirs"
++      [ ! -x /usr/bin/chkproc ] && prog="/usr/bin/chkproc"
++      [ ! -x /usr/bin/chkdirs ] && prog="$prog /usr/bin/chkdirs"
        if [ "$prog" != "" ]; then
  #        echo "not tested: can't exec $prog"
          return ${NOT_TESTED}
-@@ -241,7 +242,7 @@
+@@ -241,7 +241,7 @@
        if [ "${EXPERT}" = "t" ]; then
           [ -r /proc/ksyms ] &&  ${egrep} -i "adore|sebek" < /proc/ksyms 2>/dev/null
           [ -d /proc/knark ] &&  ${ls} -la /proc/knark 2> /dev/null
--          expertmode_output "./chkproc -v"
-+          expertmode_output "/usr/bin/chkrootkit-chkproc -v"
+-          expertmode_output "./chkproc -v -v"
++          expertmode_output "/usr/bin/chkproc -v -v"
            return 5
        fi
  
-@@ -262,7 +263,7 @@
+@@ -262,7 +262,7 @@
           echo "Warning: Knark LKM installed"
        fi
  
 -      if ./chkproc
-+      if /usr/bin/chkrootkit-chkproc
++      if /usr/bin/chkproc
        then
             if [ "${QUIET}" != "t" ]; then echo "nothing detected"; fi
        else
-@@ -1344,18 +1345,18 @@
+@@ -1350,18 +1350,18 @@
  
     if [ "${SYSTEM}" = "Linux" ]
     then
 -      if [ ! -x ./strings ]; then
 -        printn "can't exec ./strings-static, "
-+      if [ ! -x /usr/bin/chkrootkit-strings ]; then
-+        printn "can't exec /usr/bin/chkrootkit-strings, "
++      if [ ! -x /usr/bin/strings ]; then
++        printn "can't exec /usr/bin/strings-static, "
          return ${NOT_TESTED}
        fi
  
        if [ "${EXPERT}" = "t" ]; then
 -          expertmode_output "./strings -a ${CMD}"
-+          expertmode_output "/usr/bin/chkrootkit-strings -a ${CMD}"
++          expertmode_output "/usr/bin/strings -a ${CMD}"
            return 5
        fi
  
        ### strings must be a statically linked binary.
 -      if ./strings-static -a ${CMD} > /dev/null 2>&1
-+      if /usr/bin/chkrootkit-strings -a ${CMD} > /dev/null 2>&1
++      if /usr/bin/strings-static -a ${CMD} > /dev/null 2>&1
        then
           STATUS=${INFECTED}
        fi

diff --git a/chkrootkit-wtmp.patch b/chkrootkit-wtmp.patch
index 22c1ba011c736a2409a095d08d83d8aa39a8a038..e34f11908032398f28c759ddcebf5ac74d5e5252 100644 (file)
--- a/chkrootkit-wtmp.patch
+++ b/chkrootkit-wtmp.patch
@@ -1,6 +1,7 @@
---- ./chkrootkit.org   Wed Feb 13 12:58:05 2002
-+++ ./chkrootkit       Wed Feb 13 12:58:45 2002
-@@ -105,7 +105,7 @@
+diff -Nur chkrootkit-0.39a.orig/chkrootkit chkrootkit-0.39a/chkrootkit
+--- chkrootkit-0.39a.orig/chkrootkit   Thu Jan 30 23:45:57 2003
++++ chkrootkit-0.39a/chkrootkit        Sat Feb  8 16:51:03 2003
+@@ -149,7 +149,7 @@
        return ${NOT_TESTED}
      fi
  
@@ -9,12 +10,12 @@
      LASTLOG=`loc lastlog lastlog "${ROOTDIR}var/log ${ROOTDIR}var/adm"`
  
      if [ "${EXPERT}" = "t" ]; then
-@@ -141,7 +141,7 @@
+@@ -184,7 +184,7 @@
+           fi
         fi
-     fi
+    else
+-       WTMP=`loc wtmp wtmp "${ROOTDIR}var/log ${ROOTDIR}var/adm"`
++       WTMP=`loc wtmpx wtmpx "${ROOTDIR}var/log ${ROOTDIR}var/adm"`
  
--    WTMP=`loc wtmp wtmp "${ROOTDIR}var/log ${ROOTDIR}var/adm"`
-+    WTMP=`loc wtmpx wtmpx "${ROOTDIR}var/log ${ROOTDIR}var/adm"`
- 
-     if [ "${EXPERT}" = "t" ]; then
-         expertmode_output "./chkrootkit-chkwtmp -f ${WTMP}"
+        if [ "${EXPERT}" = "t" ]; then
+           expertmode_output "./chkwtmp -f ${WTMP}"

diff --git a/chkrootkit.spec b/chkrootkit.spec
index 86a7b0288383291f5a265476a179645780b383fe..85b7613ea0c25b65b243bc9471f211081b25ed4f 100644 (file)
--- a/chkrootkit.spec
+++ b/chkrootkit.spec
@@ -1,7 +1,7 @@
 Summary:       chkrootkit - locally checks for signs of a rootkit
 Summary(pl):   chkrootkit - narzêdzie do lokalnego szukania oznak rootkitów
 Name:          chkrootkit
-Version:       0.38
+Version:       0.39a
 Release:       1
 License:       AMS (BSD like; look at COPYRIGHT)
 Group:         Applications/Networking