summaryrefslogtreecommitdiff
path: root/app-forensics/chkrootkit
diff options
context:
space:
mode:
authorV3n3RiX <venerix@redcorelinux.org>2017-10-09 18:53:29 +0100
committerV3n3RiX <venerix@redcorelinux.org>2017-10-09 18:53:29 +0100
commit4f2d7949f03e1c198bc888f2d05f421d35c57e21 (patch)
treeba5f07bf3f9d22d82e54a462313f5d244036c768 /app-forensics/chkrootkit
reinit the tree, so we can have metadata
Diffstat (limited to 'app-forensics/chkrootkit')
-rw-r--r--app-forensics/chkrootkit/Manifest10
-rw-r--r--app-forensics/chkrootkit/chkrootkit-0.50.ebuild52
-rw-r--r--app-forensics/chkrootkit/chkrootkit-0.51.ebuild57
-rw-r--r--app-forensics/chkrootkit/files/chkrootkit.cron6
-rw-r--r--app-forensics/chkrootkit/metadata.xml8
5 files changed, 133 insertions, 0 deletions
diff --git a/app-forensics/chkrootkit/Manifest b/app-forensics/chkrootkit/Manifest
new file mode 100644
index 000000000000..25111387114e
--- /dev/null
+++ b/app-forensics/chkrootkit/Manifest
@@ -0,0 +1,10 @@
+AUX chkrootkit.cron 78 SHA256 3dfcff479e3b9e1cd79c6a65e0e668750dec0a88b09715d4fdf163c692a22412 SHA512 6839f3372d28673ee436349a107dc33b77cfd676fd16cda1ccfc5211514e840593d0f106e4e0a9331c4b658860992a9169f3a7cdd75c835a780a41097e7bd758 WHIRLPOOL 8814e849f2a1744a1d78a33e4c55521d350c1b38d3ac741d876546c36c3d208fc071df1d19354725dd20bff24bbd2ba7982b975ad2e8a254000da4962d00e163
+DIST chkrootkit-0.50-gentoo.diff.bz2 5010 SHA256 0b29ad086d0c75df6a0826bc8fd9046d5b1086173652af77f01991f367032779 SHA512 067a0a33fad2389a7ef942f76a63bed6c206d08576a77fd758ae171960804fb74d3164bc6eb582f5d8b722e9e863dc4380f5632940bc9a8c1821b46ed1062a50 WHIRLPOOL 4bc08be7be6d566bb2f52ece6c9010967c107696ce924461a4032947f66e848183921232f3f1a971cf6f932cbaad7ac9ce18af765837e3e69f7c0a57b39ceaed
+DIST chkrootkit-0.50.tar.gz 38616 SHA256 9548fc922b0cb8ddf055faff4a4887f140a31c45f2f5e3aa64aad91ecfa56cc7 SHA512 9f26fd34e85b58b13dedc5f38a889ae258bb2c0f1ff40e99c149e23f93890e956f94204b1bb2241584454e99168c53b583f52777083454237f3ba343424dba1c WHIRLPOOL d6c6afe6a14e5a9a0331202b894ed5c3e43855e15605cc9a6cbf69dbd09f180754ee587cf4eba88cb0ceb4d7fcd9924f4f02110154450fd06e992fc1710b91d8
+DIST chkrootkit-0.51-gentoo.diff.xz 4708 SHA256 150ea7a343d93382be286ea649be2b6a0784be98da1757b86a30fe1ed1ee06f0 SHA512 13dca9c272d85d35d736e14896058612f62e1781aac034f06882fe63d956f074a3c67bf308c104f0080323bb127ba01373967b2c28481741d17d83310fe52dd0 WHIRLPOOL fa7a33fbca05f778ad2cc3694f93e04ee6b24f822f03e79ef0bb7c33049a447aac389ade66edecc8d6f79301c225573e50c465ca075a23e5c44904f817f97f10
+DIST chkrootkit-0.51.tar 174080 SHA256 d262b6c0292399c409a5d70f5a5646c76f5612c3bf416e4e21ba6cdecf9ae7c5 SHA512 adef6823d069b32305605d0eaa3d3701c6a87900646d9509cebe0fd8a2fec0523595d0dcb4576b32245e7638388d3b43858dbc42be68de9971ac8461fcfdeb34 WHIRLPOOL 9a379c73ced0eb5cf679cd99514d41b85a685b9cf54c23d7c682f5020b49d35c7bd79c01d0b029420dfaddd3a1de4a8765832879bc8ba9525f9dce30e9274e6c
+EBUILD chkrootkit-0.50.ebuild 1237 SHA256 7c14f5d862908bde29b20896419ee70e4047cb743920d10955f0696adc50ff56 SHA512 9700c79624724a90d50949f31e19f76c03168b8abf512281f5f8d7f4aaa3984053b764f03280fb5c9cda1adc360c156cd1ffba8799976d57e815bd60c4cf215a WHIRLPOOL 140cca6c3f4d3de2f61215062c81008fbcc75e800053f5250a1fc353bb1d393decd9ce52a5b3c0d21e7ec2b6c797368c12988500a4956273e3c3e725610bb127
+EBUILD chkrootkit-0.51.ebuild 1336 SHA256 cbe0c3250cd7c9c03fa37daebfa3eab1af67825d122e8844e2be20b134c262fa SHA512 9e41364caf66facb0c100e39d40d97fb835a01d72c9d5d3ec5bdaf399dd8beec4a6334b0303eca23dbc3f23e552422c8eef53995762f0700d7df20fd69254ca9 WHIRLPOOL 0b7b9d7a84f92eaabce0764f30f1bfdc6333e6ff646e730f18046b34855e953b8fa3c31b319986b8b7c129a33453ccf450cc2606024e05a406d0a896933c89fa
+MISC ChangeLog 5086 SHA256 822eb35bbc3ccc9a9a06144d43bc5da07ea521e94506fd9dc6c67c44930b556e SHA512 1bd974b36b98bbbbc61362a759589adc6cecc94bf74c7f77a57bbfffd5c1f3ae59de67354d88930b1ca68f2c1633fce825816d08848695d2df52cb2d1a9bd286 WHIRLPOOL 47610e56d66d1267e92cbdfa89995f8287e3e34154d3e135960a68f412d0490392f13f4a102f859a2dcb35385d022c2f1daef20c840030be22b173816b1fdf68
+MISC ChangeLog-2015 15278 SHA256 01598bae28a1fd2249b7ea2e533fb74f8397200360cd94cc6a5e3b0213089635 SHA512 27270622a7fa4346f756226095cf41503d005d8b460f5e7315859fd66a37fbc0f290c4e2df093b1024f64d5af22581bbed7de3eaaafd1ef8a491b41e7fe73739 WHIRLPOOL 037d90b3cf55a0051746e30140b3590a93f867fe8eb0c7830ae7f513041152ac5f7867ca1e563adbdd9180bf3b788d94c5d7e07115e1cec3613ada13957a2dfd
+MISC metadata.xml 254 SHA256 84dee6d499237b0393493e8d049d84146405d89060b6512e895753e89664d2f5 SHA512 f0b5ba232a76e933dd34a7e3e7fa04e627de0201610166f4758c5ccf888f509815b5cc39f5373b87a413496318f507bf28599ec0995d32bde98a7c65287d39bb WHIRLPOOL 238d9cd39184428fdc656826bfd21b581c2aa931ae17cddeb7082b3c5f1d859a8187abba047344e32125cc6de557099ff1a0a6e4d69720cd6e004325dfac6775
diff --git a/app-forensics/chkrootkit/chkrootkit-0.50.ebuild b/app-forensics/chkrootkit/chkrootkit-0.50.ebuild
new file mode 100644
index 000000000000..5c44abd63000
--- /dev/null
+++ b/app-forensics/chkrootkit/chkrootkit-0.50.ebuild
@@ -0,0 +1,52 @@
+# Copyright 1999-2016 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI="5"
+
+inherit eutils toolchain-funcs
+
+DESCRIPTION="Tool to locally check for signs of a rootkit"
+HOMEPAGE="http://www.chkrootkit.org/"
+SRC_URI="ftp://ftp.pangeia.com.br/pub/seg/pac/${P}.tar.gz
+ https://dev.gentoo.org/~xmw/${P}-gentoo.diff.bz2"
+
+LICENSE="BSD-2"
+SLOT="0"
+KEYWORDS="alpha amd64 arm ~hppa ia64 ~mips ppc ppc64 ~s390 ~sh sparc x86"
+IUSE="+cron"
+
+RDEPEND="cron? ( virtual/cron )"
+
+src_prepare() {
+ epatch "${WORKDIR}"/${P}-gentoo.diff
+ sed -e 's:/var/adm/:/var/log/:g' \
+ -i chklastlog.c || die
+}
+
+src_compile() {
+ emake CC="$(tc-getCC)" STRIP=true sense
+}
+
+src_install() {
+ dosbin chkdirs chklastlog chkproc chkrootkit chkwtmp chkutmp ifpromisc strings-static
+ dodoc ACKNOWLEDGMENTS README*
+
+ if use cron ; then
+ exeinto /etc/cron.weekly
+ newexe "${FILESDIR}"/${PN}.cron ${PN}
+ fi
+}
+
+pkg_postinst() {
+ if use cron ; then
+ elog
+ elog "Edit /etc/cron.weekly/chkrootkit to activate chkrootkit!"
+ elog
+ fi
+
+ elog
+ elog "Some applications, such as portsentry, will cause chkrootkit"
+ elog "to produce false positives. Read the chkrootkit FAQ at"
+ elog "http://www.chkrootkit.org/ for more information."
+ elog
+}
diff --git a/app-forensics/chkrootkit/chkrootkit-0.51.ebuild b/app-forensics/chkrootkit/chkrootkit-0.51.ebuild
new file mode 100644
index 000000000000..c869d9e7709e
--- /dev/null
+++ b/app-forensics/chkrootkit/chkrootkit-0.51.ebuild
@@ -0,0 +1,57 @@
+# Copyright 1999-2017 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=6
+
+inherit eutils toolchain-funcs
+
+DESCRIPTION="Tool to locally check for signs of a rootkit"
+HOMEPAGE="http://www.chkrootkit.org/"
+# Upstream named their *uncompressed* tarball .tar.gz (*sigh*)
+SRC_URI="ftp://ftp.pangeia.com.br/pub/seg/pac/${P}.tar.gz -> ${P}.tar
+ https://dev.gentoo.org/~polynomial-c/${P}-gentoo.diff.xz"
+
+LICENSE="BSD-2"
+SLOT="0"
+KEYWORDS="alpha ~amd64 arm ~hppa ia64 ~mips ppc ppc64 ~s390 ~sh ~sparc ~x86"
+IUSE="+cron"
+
+RDEPEND="cron? ( virtual/cron )"
+
+PATCHES=(
+ "${WORKDIR}"/${P}-gentoo.diff
+)
+
+src_prepare() {
+ default
+ sed -e 's:/var/adm/:/var/log/:g' \
+ -i chklastlog.c || die
+}
+
+src_compile() {
+ emake CC="$(tc-getCC)" STRIP=true sense
+}
+
+src_install() {
+ dosbin chkdirs chklastlog chkproc chkrootkit chkwtmp chkutmp ifpromisc strings-static
+ dodoc ACKNOWLEDGMENTS README*
+
+ if use cron ; then
+ exeinto /etc/cron.weekly
+ newexe "${FILESDIR}"/${PN}.cron ${PN}
+ fi
+}
+
+pkg_postinst() {
+ if use cron ; then
+ elog
+ elog "Edit /etc/cron.weekly/chkrootkit to activate chkrootkit!"
+ elog
+ fi
+
+ elog
+ elog "Some applications, such as portsentry, will cause chkrootkit"
+ elog "to produce false positives. Read the chkrootkit FAQ at"
+ elog "http://www.chkrootkit.org/ for more information."
+ elog
+}
diff --git a/app-forensics/chkrootkit/files/chkrootkit.cron b/app-forensics/chkrootkit/files/chkrootkit.cron
new file mode 100644
index 000000000000..9f7eb17b13b1
--- /dev/null
+++ b/app-forensics/chkrootkit/files/chkrootkit.cron
@@ -0,0 +1,6 @@
+#!/bin/sh
+#
+# uncomment this to make it work
+#
+
+#exec /usr/sbin/chkrootkit -q
diff --git a/app-forensics/chkrootkit/metadata.xml b/app-forensics/chkrootkit/metadata.xml
new file mode 100644
index 000000000000..e02dd379868e
--- /dev/null
+++ b/app-forensics/chkrootkit/metadata.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+ <!-- maintainer-needed -->
+ <use>
+ <flag name="cron">Install cron script for weekly rootkit scans</flag>
+ </use>
+</pkgmetadata>