Update: chkrootkit 0.43 (RH 8.0, RH 9, FC 1, stable)

Name : chkrootkit
Version : 0.43
Release : 0.fdr.4.1
Group : Applications/System
Size : 516176
License : COPYRIGHTED
Signature : DSA/SHA1, Fri 02 Apr 2004 04:13:56 CEST, Key ID 29d5ba248df56d05
Packager : Fedora Linux, <http://fedora.us>
URL : http://www.chkrootkit.org
Summary : A tool to locally check for signs of a rootkit


Description :
chkrootkit is a tool to locally check for signs of a rootkit. It contains:

* chkrootkit: shell script that checks system binaries for rootkit
modification. The following tests are made:

o aliens asp bindshell lkm rexedcs sniffer wted scalper slapper z2 amd
basename biff chfn chsh cron date du dirname echo egrep env find fingerd
gpm grep hdparm su ifconfig inetd inetdconf init identd killall ldsopreload
login ls lsof mail mingetty netstat named passwd pidof pop2 pop3 ps pstree
rpcinfo rlogind rshd slogin sendmail sshd syslogd tar tcpd tcpdump top
telnetd timed traceroute vdir w write

* ifpromisc.c: checks if the interface is in promiscuous mode.
* chklastlog.c: checks for lastlog deletions.
* chkwtmp.c: checks for wtmp deletions.
* check_wtmpx.c: checks for wtmpx deletions. (Solaris only)
* chkproc.c: checks for signs of LKM trojans.
* chkdirs.c: checks for signs of LKM trojans.
* strings.c: quick and dirty strings replacement.


* Sat Mar 13 2004 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.43-0.fdr.4

- rh80 doesn't have sed -i, use perl instead (#1326).
- Obsolete chkrootkit-strings patch due to soft-link since 0.43-0.fdr.1.

* Fri Feb 27 2004 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.43-0.fdr.3

- Make in %build section (#1326).

* Fri Feb 27 2004 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.43-0.fdr.2

- Substitute a few hardcoded paths (#1326).

* Thu Feb 26 2004 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.43-0.fdr.1

- Update to 0.43.
- Add dependency on consolehelper binary.
- Drop patched chkrootkit script due to change in 0.42-0.fdr.3.b.
- Make available "strings-static" as "strings", too.

* Wed Dec 10 2003 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.42-0.fdr.3.b

- Make /usr/bin/chkrootkit enter chkrootkit home directory.
This puts its own helper tools into its search path.

* Thu Dec 04 2003 Phillip Compton <pcompton[AT]proteinmedia.com> - 0.42-0.fdr.2.b

- Move binaries out of %{_datadir}.