# HG changeset patch # User Pascal Bellard # Date 1434352573 -7200 # Node ID 53abdfcf11d45cedc884e14b8d37d4a0a679c087 # Parent 6261073d1225ab886ae33c04741504daf64b2aa9 Up chkrootkit (0.50), rkhunter (1.4.2) diff -r 6261073d1225 -r 53abdfcf11d4 chkrootkit/receipt --- a/chkrootkit/receipt Sun Jun 14 11:57:25 2015 +0100 +++ b/chkrootkit/receipt Mon Jun 15 09:16:13 2015 +0200 @@ -1,7 +1,7 @@ # SliTaz package receipt. PACKAGE="chkrootkit" -VERSION="0.49" +VERSION="0.50" CATEGORY="system-tools" SHORT_DESC="Locally checks for signs of a rootkit." MAINTAINER="pascal.bellard@slitaz.org" @@ -13,7 +13,6 @@ # Rules to configure and make the package. compile_rules() { - cd $src [ -f done.chkrootkit.u ] || patch -p1 < $stuff/chkrootkit.u touch done.chkrootkit.u make sense @@ -31,4 +30,3 @@ esac done } - diff -r 6261073d1225 -r 53abdfcf11d4 chkrootkit/stuff/chkrootkit.u --- a/chkrootkit/stuff/chkrootkit.u Sun Jun 14 11:57:25 2015 +0100 +++ b/chkrootkit/stuff/chkrootkit.u Mon Jun 15 09:16:13 2015 +0200 @@ -1,6 +1,6 @@ --- chkrootkit-0.48/chkrootkit +++ chkrootkit-0.48/chkrootkit -@@ -562,8 +562,13 @@ +@@ -591,8 +591,13 @@ if [ ! -z "${SHELL}" -a ! -z "${HOME}" ]; then expertmode_output "${find} ${ROOTDIR}${HOME} ${findargs} -name .*history \ -size 0" @@ -15,18 +15,18 @@ fi return 5 -@@ -957,7 +962,9 @@ +@@ -991,7 +996,9 @@ ### Suckit if [ -f ${ROOTDIR}sbin/init ]; then if [ "${QUIET}" != "t" ];then printn "Searching for Suckit rootkit... "; fi -- if [ ${SYSTEM} != "HP-UX" ] && ( ${strings} ${ROOTDIR}sbin/init | ${egrep} HOME || \ +- if [ ${SYSTEM} != "HP-UX" ] && ( ${strings} ${ROOTDIR}sbin/init | ${egrep} 'HOME=' || \ + if [ ${SYSTEM} != "HP-UX" ] && \ + ((! ls -l ${ROOTDIR}sbin/init | ${egrep} -q "bin/busybox$" && \ -+ ${strings} ${ROOTDIR}sbin/init | ${egrep} HOME) || \ ++ ${strings} ${ROOTDIR}sbin/init | ${egrep} 'HOME=' ) || \ cat ${ROOTDIR}/proc/1/maps | ${egrep} "init." ) >/dev/null 2>&1 then echo "Warning: ${ROOTDIR}sbin/init INFECTED" -@@ -1127,7 +1134,12 @@ +@@ -1190,7 +1195,12 @@ files=`${find} ${ROOTDIR}${HOME} ${findargs} -name '.*history' -size 0` [ ! -z "${files}" ] && \ echo "Warning: \`${files}' file size is zero" @@ -40,7 +40,7 @@ [ ! -z "${files1}" ] && \ echo "Warning: \`${files}' is linked to another file" fi -@@ -1537,6 +1549,9 @@ +@@ -1600,6 +1610,9 @@ chk_netstat () { STATUS=${NOT_INFECTED} NETSTAT_I_L="/dev/hdl0/dev/xdta|/dev/ttyoa|/dev/pty[pqrsx]|/dev/cui|/dev/hdn0|/dev/cui221|/dev/dszy|/dev/ddth3|/dev/caca|^/prof|/dev/tux|grep|addr\.h|__bzero" diff -r 6261073d1225 -r 53abdfcf11d4 rkhunter/receipt --- a/rkhunter/receipt Sun Jun 14 11:57:25 2015 +0100 +++ b/rkhunter/receipt Mon Jun 15 09:16:13 2015 +0200 @@ -1,7 +1,7 @@ # SliTaz package receipt. PACKAGE="rkhunter" -VERSION="1.4.0" +VERSION="1.4.2" CATEGORY="security" SHORT_DESC="Rootkit scanner." MAINTAINER="pascal.bellard@slitaz.org" @@ -25,4 +25,3 @@ { cp -a $install/* $fs } -