diff --git a/README.md b/README.md index 66df24c..481d791 100644 --- a/README.md +++ b/README.md @@ -1,2 +1,17 @@ # chkrootkit +chkrootkit is a tool to locally check for signs of a rootkit. +It contains: +* chkrootkit: shell script that checks system binaries for rootkit modification. +* ifpromisc: checks if the network interface is in promiscuous mode. +* chklastlog: checks for lastlog deletions. +* chkutmp.c: checks for utmp deletions. +* chkwtmp: checks for wtmp deletions. +* chkdirs: checks for signs of LKM trojans. +* chkproc: checks for signs of LKM trojans. +* strings: quick and dirty strings replacement. + +A large number of rootkits, worms and LKMs are currently detected. +For an updated list of rootkits, worms and LKMs detected by chkrootkit please +visit: http://www.chkrootkit.org/ + diff --git a/chkrootkit.spec b/chkrootkit.spec new file mode 100644 index 0000000..4afb1d6 --- /dev/null +++ b/chkrootkit.spec @@ -0,0 +1,78 @@ +Name: chkrootkit +Version: 0.49 +Release: 2mamba +Summary: A tool to locally check for signs of a rootkit +Group: Applications/Security +Vendor: openmamba +Distribution: openmamba +Packager: Silvan Calarco +URL: ftp://ftp.pangeia.com.br/pub/seg/pac/ +Source: ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit-%{version}.tar.gz +License: BSD +#bsd like (see COPYRIGHT) +BuildRoot: %{_tmppath}/%{name}-%{version}-root + +%description +chkrootkit is a tool to locally check for signs of a rootkit. +It contains: +* chkrootkit: shell script that checks system binaries for rootkit modification. +* ifpromisc: checks if the network interface is in promiscuous mode. +* chklastlog: checks for lastlog deletions. +* chkutmp.c: checks for utmp deletions. +* chkwtmp: checks for wtmp deletions. +* chkdirs: checks for signs of LKM trojans. +* chkproc: checks for signs of LKM trojans. +* strings: quick and dirty strings replacement. + +A large number of rootkits, worms and LKMs are currently detected. +For an updated list of rootkits, worms and LKMs detected by chkrootkit please +visit: http://www.chkrootkit.org/ + +%prep +%setup -q + +%build +%make all + +%install +[ "%{buildroot}" != / ] && rm -rf "%{buildroot}" + +install -d %{buildroot}%{_sbindir} +find -perm +755 -type f -exec install -m755 {} %{buildroot}%{_sbindir}/ \; + +%clean +[ "%{buildroot}" != / ] && rm -rf "%{buildroot}" + +%files +%defattr(-,root,root) +%{_sbindir}/check_wtmpx +%{_sbindir}/chkdirs +%{_sbindir}/chklastlog +%{_sbindir}/chkproc +%{_sbindir}/chkrootkit +%{_sbindir}/chkutmp +%{_sbindir}/chkwtmp +%{_sbindir}/ifpromisc +%{_sbindir}/strings-static +%doc ACKNOWLEDGMENTS COPYRIGHT README* + +%changelog +* Thu Aug 01 2013 Automatic Build System 0.49-2mamba +- automatic rebuild by autodist + +* Sat Aug 08 2009 Automatic Build System 0.49-1mamba +- automatic update by autodist + +* Sat Oct 04 2008 Silvan Calarco 0.48-1mamba +- automatic update by autodist + +* Sat Aug 18 2007 Fabio Giani 0.47-1mamba +- update to version 0.47 + + +* Mon Nov 07 2005 Davide Madrisan 0.46a-1qilnx +- update to version 0.46a by autospec +- specfile updates + +* Fri Jul 09 2004 Silvan Calarco 0.43-1qilnx +- first build