Date: Fri, 24 Nov 2006 12:38:32 -0200 (BRST) From: Luiz Eduardo Roncato Cordeiro <cordeiro@cert.br> To: FreeBSD-gnats-submit@FreeBSD.org Cc: cordeiro@cert.br Subject: ports/105816: update to version 0.47 plus patches Message-ID: <20061124143832.2F8BA5C06D@luinil.cert.br> Resent-Message-ID: <200611241440.kAOEeJoH060167@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 105816 >Category: ports >Synopsis: update to version 0.47 plus patches >Confidential: no >Severity: non-critical >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Fri Nov 24 14:40:18 GMT 2006 >Closed-Date: >Last-Modified: >Originator: Luiz Eduardo Roncato Cordeiro >Release: FreeBSD 6.1-RELEASE-p10 i386 >Organization: - >Environment: System: FreeBSD XXXX 6.1-RELEASE-p10 FreeBSD 6.1-RELEASE-p10 #14: Mon Oct 2 13:32:37 BRT 2006 root@XXXX i386 >Description: Update to chkrookit version 0.47 * chkproc.c - some bug fixes, thanks to Lantz Moore - [REMOVED DUE FALSE POSITIVES] use of getpriority() to identify LKMs, thanks to Yjesus(unhide) and Slider/Flimbo (skdet) - new rootkit detected: Enye LKM * chkrootkit - new test: crontab - new rootkits detected: Enye LKM, Lupper.Worm, shv5 - more ports added to the bindshell test - some minor bug fixes >How-To-Repeat: >Fix: diff -ruN /usr/ports/security/chkrootkit.old/Makefile /usr/ports/security/chkrootkit/Makefile --- /usr/ports/security/chkrootkit.old/Makefile Tue Oct 17 15:45:08 2006 +++ /usr/ports/security/chkrootkit/Makefile Fri Nov 24 12:29:20 2006 @@ -6,7 +6,7 @@ # PORTNAME= chkrootkit -PORTVERSION= 0.46a +PORTVERSION= 0.47 CATEGORIES= security MASTER_SITES= ftp://ftp.pangeia.com.br/pub/seg/pac/ \ ftp://gd.tuwien.ac.at/infosys/security/chkrootkit/ \ @@ -30,6 +30,26 @@ BINMODE= 0700 +.include <bsd.port.pre.mk> + +.if ${OSVERSION} >= 600000 + +EXTRA_PATCHES= ${PATCHDIR}/600000-patch-chkproc.c + +pre-everything:: + @${ECHO_CMD} "######################################################################" + @${ECHO_CMD} "#" + @${ECHO_CMD} "# WARNING: chkproc process gives false positives values on" + @${ECHO_CMD} "# FreeBSD >= 6.x, and, due this fact, the getpriority code" + @${ECHO_CMD} "# added to identify LKMs was removed." + @${ECHO_CMD} "# So, use with caution." + @${ECHO_CMD} "#" + @${ECHO_CMD} "# This error will be fixed in the next chkrootkit version." + @${ECHO_CMD} "#" + @${ECHO_CMD} "######################################################################" + +.endif + pre-patch: ${REINPLACE_CMD} -e "s/^CC/#CC/; s/^CFLAGS/#CFLAGS/" ${WRKSRC}/Makefile ${REINPLACE_CMD} -e \ @@ -58,4 +78,4 @@ ${INSTALL_DATA} ${PORTDOCS:C,^,${WRKSRC}/,} ${DOCSDIR} .endif -.include <bsd.port.mk> +.include <bsd.port.post.mk> diff -ruN /usr/ports/security/chkrootkit.old/distinfo /usr/ports/security/chkrootkit/distinfo --- /usr/ports/security/chkrootkit.old/distinfo Tue Oct 17 15:45:08 2006 +++ /usr/ports/security/chkrootkit/distinfo Fri Nov 10 09:41:59 2006 @@ -1,3 +1,3 @@ -MD5 (chkrootkit-0.46a.tar.gz) = b73fb9e365d2edcd031d65b16e965a18 -SHA256 (chkrootkit-0.46a.tar.gz) = ec23b4be57e08f6c28f646a447a8545f9c612fd4b296133ac9c3c3ac13e1d696 -SIZE (chkrootkit-0.46a.tar.gz) = 37140 +MD5 (chkrootkit-0.47.tar.gz) = 4c6455d202cef35395a673386e4bf01a +SHA256 (chkrootkit-0.47.tar.gz) = 5a5aeb597769cc2843648858b95fc7abd3485ba7edd1800d69e0125220c6669f +SIZE (chkrootkit-0.47.tar.gz) = 37791 diff -ruN /usr/ports/security/chkrootkit.old/files/600000-patch-chkproc.c /usr/ports/security/chkrootkit/files/600000-patch-chkproc.c --- /usr/ports/security/chkrootkit.old/files/600000-patch-chkproc.c Wed Dec 31 21:00:00 1969 +++ /usr/ports/security/chkrootkit/files/600000-patch-chkproc.c Fri Nov 24 12:09:18 2006 @@ -0,0 +1,21 @@ +--- chkproc.c.orig Fri Nov 24 12:03:25 2006 ++++ chkproc.c Fri Nov 24 12:04:43 2006 +@@ -334,18 +334,6 @@ + } + #endif + } +- else +- { +- errno = 0; +- getpriority(PRIO_PROCESS, i); +- if (!errno) +- { +- retdir++; +- if (verbose) +- printf ("PID %5d(%s): not in getpriority readdir output\n", i, buf); +- } +- } +- + } + if (retdir) + printf("You have % 5d process hidden for readdir command\n", retdir); >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20061124143832.2F8BA5C06D>