aboutsummaryrefslogtreecommitdiff
path: root/security/chkrootkit
diff options
context:
space:
mode:
Diffstat (limited to 'security/chkrootkit')
-rw-r--r--security/chkrootkit/Makefile4
-rw-r--r--security/chkrootkit/distinfo2
-rw-r--r--security/chkrootkit/pkg-descr10
-rw-r--r--security/chkrootkit/pkg-plist1
4 files changed, 13 insertions, 4 deletions
diff --git a/security/chkrootkit/Makefile b/security/chkrootkit/Makefile
index eaca0c38df10..cb9d48dd14ec 100644
--- a/security/chkrootkit/Makefile
+++ b/security/chkrootkit/Makefile
@@ -6,7 +6,7 @@
#
PORTNAME= chkrootkit
-PORTVERSION= 0.32
+PORTVERSION= 0.34
CATEGORIES= security
MASTER_SITES= ftp://ftp.pangeia.com.br/pub/seg/pac/
@@ -14,7 +14,7 @@ MAINTAINER= cordeiro@iqm.unicamp.br
ALL_TARGET= chkrootkit chklastlog chkwtmp ifpromisc
-DOCFILES= COPYRIGHT README.chklastlog README.chkwtmp
+DOCFILES= COPYRIGHT README README.chklastlog README.chkwtmp
pre-patch:
${PERL} -pi -e "s/^CC/#CC/; s/^CFLAGS/#CFLAGS/" ${WRKSRC}/Makefile
diff --git a/security/chkrootkit/distinfo b/security/chkrootkit/distinfo
index d3a45362f804..17bcd03f51fa 100644
--- a/security/chkrootkit/distinfo
+++ b/security/chkrootkit/distinfo
@@ -1 +1 @@
-MD5 (chkrootkit-0.32.tar.gz) = 6ed5ae272538a64fe2e395931de3bdf7
+MD5 (chkrootkit-0.34.tar.gz) = 3dea2c29537d086e85134c600b38bc3b
diff --git a/security/chkrootkit/pkg-descr b/security/chkrootkit/pkg-descr
index e236d55bfb37..1b6c0c5c5550 100644
--- a/security/chkrootkit/pkg-descr
+++ b/security/chkrootkit/pkg-descr
@@ -3,16 +3,24 @@ contains:
* chkrootkit: a shell script that checks system binaries for
rootkit modification.
+
* ifpromisc.c: checks if the network interface is in promiscuous
mode.
+
* chklastlog.c: checks for lastlog deletions.
+
* chkwtmp.c: checks for wtmp deletions.
+
+ * check_wtmpx.c: checks for wtmpx deletions. (Solaris only)
+
+ * chkproc.c: checks for signs of LKM trojans.
The following rootkits, worms and LKMs are currently detected:
Solaris rootkit, FreeBSD rootkit, lrk3, lrk4, lrk5, lrk6, t0rn (and
t0rn v8), some lrk variants, Ambient's Rootkit for Linux (ARK), Ramen
Worm, rh[67]-shaper, RSHA, Romanian rootkit, RK17, Lion Worm, Adore
- Worm, LPD Worm, kenny-rk and Adore LKM.
+ Worm, LPD Worm, kenny-rk, Adore LKM, ShitC Worm, Omega Worm, Wormkit
+ Worm, dsc-rootkit.
Nelson Murilo <nelson@pangeia.com.br>
diff --git a/security/chkrootkit/pkg-plist b/security/chkrootkit/pkg-plist
index 2bf22cf69b5a..73a7df16c6de 100644
--- a/security/chkrootkit/pkg-plist
+++ b/security/chkrootkit/pkg-plist
@@ -3,6 +3,7 @@ sbin/chklastlog
sbin/chkwtmp
sbin/ifpromisc
%%PORTDOCS%%share/doc/chkrootkit/COPYRIGHT
+%%PORTDOCS%%share/doc/chkrootkit/README
%%PORTDOCS%%share/doc/chkrootkit/README.chklastlog
%%PORTDOCS%%share/doc/chkrootkit/README.chkwtmp
%%PORTDOCS%%@dirrm share/doc/chkrootkit