From 7189fd9ff5e6ade64fb3ddf327f34d8901050f2a Mon Sep 17 00:00:00 2001
From: Automatic Build System <autodist@mambasoft.it>
Date: Fri, 5 Jan 2024 21:12:50 +0100
Subject: [PATCH] automatic rebuild by autodist [release 0.49-2mamba;Thu Aug 01
 2013]

---
 README.md       | 15 ++++++++++
 chkrootkit.spec | 78 +++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 93 insertions(+)
 create mode 100644 chkrootkit.spec

diff --git a/README.md b/README.md
index 66df24c..481d791 100644
--- a/README.md
+++ b/README.md
@@ -1,2 +1,17 @@
 # chkrootkit
 
+chkrootkit is a tool to locally check for signs of a rootkit.
+It contains:
+* chkrootkit: shell script that checks system binaries for rootkit modification.
+* ifpromisc: checks if the network interface is in promiscuous mode.
+* chklastlog: checks for lastlog deletions.
+* chkutmp.c: checks for utmp deletions.
+* chkwtmp: checks for wtmp deletions.
+* chkdirs: checks for signs of LKM trojans.
+* chkproc: checks for signs of LKM trojans.
+* strings: quick and dirty strings replacement.
+
+A large number of rootkits, worms and LKMs are currently detected.
+For an updated list of rootkits, worms and LKMs detected by chkrootkit please
+visit: http://www.chkrootkit.org/
+
diff --git a/chkrootkit.spec b/chkrootkit.spec
new file mode 100644
index 0000000..4afb1d6
--- /dev/null
+++ b/chkrootkit.spec
@@ -0,0 +1,78 @@
+Name:          chkrootkit
+Version:       0.49
+Release:       2mamba
+Summary:       A tool to locally check for signs of a rootkit
+Group:         Applications/Security
+Vendor:        openmamba
+Distribution:  openmamba
+Packager:      Silvan Calarco <silvan.calarco@mambasoft.it>
+URL:           ftp://ftp.pangeia.com.br/pub/seg/pac/
+Source:        ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit-%{version}.tar.gz
+License:       BSD
+#bsd like (see COPYRIGHT)
+BuildRoot:     %{_tmppath}/%{name}-%{version}-root
+
+%description
+chkrootkit is a tool to locally check for signs of a rootkit.
+It contains:
+* chkrootkit: shell script that checks system binaries for rootkit modification.
+* ifpromisc: checks if the network interface is in promiscuous mode.
+* chklastlog: checks for lastlog deletions.
+* chkutmp.c: checks for utmp deletions.
+* chkwtmp: checks for wtmp deletions.
+* chkdirs: checks for signs of LKM trojans.
+* chkproc: checks for signs of LKM trojans.
+* strings: quick and dirty strings replacement.
+
+A large number of rootkits, worms and LKMs are currently detected.
+For an updated list of rootkits, worms and LKMs detected by chkrootkit please
+visit: http://www.chkrootkit.org/
+
+%prep
+%setup -q
+
+%build
+%make all
+
+%install
+[ "%{buildroot}" != / ] && rm -rf "%{buildroot}"
+
+install -d %{buildroot}%{_sbindir}
+find -perm +755 -type f -exec install -m755 {} %{buildroot}%{_sbindir}/ \;
+
+%clean
+[ "%{buildroot}" != / ] && rm -rf "%{buildroot}"
+
+%files
+%defattr(-,root,root)
+%{_sbindir}/check_wtmpx
+%{_sbindir}/chkdirs
+%{_sbindir}/chklastlog
+%{_sbindir}/chkproc
+%{_sbindir}/chkrootkit
+%{_sbindir}/chkutmp
+%{_sbindir}/chkwtmp
+%{_sbindir}/ifpromisc
+%{_sbindir}/strings-static
+%doc ACKNOWLEDGMENTS COPYRIGHT README*
+
+%changelog
+* Thu Aug 01 2013 Automatic Build System <autodist@mambasoft.it> 0.49-2mamba
+- automatic rebuild by autodist
+
+* Sat Aug 08 2009 Automatic Build System <autodist@mambasoft.it> 0.49-1mamba
+- automatic update by autodist
+
+* Sat Oct 04 2008 Silvan Calarco <silvan.calarco@mambasoft.it> 0.48-1mamba
+- automatic update by autodist
+
+* Sat Aug 18 2007 Fabio Giani <fabio.giani@email.it> 0.47-1mamba
+- update to version 0.47
+
+
+* Mon Nov 07 2005 Davide Madrisan <davide.madrisan@qilinux.it> 0.46a-1qilnx
+- update to version 0.46a by autospec
+- specfile updates
+
+* Fri Jul 09 2004 Silvan Calarco <silvan.calarco@mambasoft.it> 0.43-1qilnx
+- first build