Name: chkrootkit Version: 0.50 Release: 1mamba Summary: A tool to locally check for signs of a rootkit Group: Applications/Security Vendor: openmamba Distribution: openmamba Packager: Silvan Calarco URL: ftp://ftp.pangeia.com.br/pub/seg/pac/ Source: ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit-%{version}.tar.gz License: BSD #bsd like (see COPYRIGHT) BuildRoot: %{_tmppath}/%{name}-%{version}-root %description chkrootkit is a tool to locally check for signs of a rootkit. It contains: * chkrootkit: shell script that checks system binaries for rootkit modification. * ifpromisc: checks if the network interface is in promiscuous mode. * chklastlog: checks for lastlog deletions. * chkutmp.c: checks for utmp deletions. * chkwtmp: checks for wtmp deletions. * chkdirs: checks for signs of LKM trojans. * chkproc: checks for signs of LKM trojans. * strings: quick and dirty strings replacement. A large number of rootkits, worms and LKMs are currently detected. For an updated list of rootkits, worms and LKMs detected by chkrootkit please visit: http://www.chkrootkit.org/. %prep %setup -q %build %make all %install [ "%{buildroot}" != / ] && rm -rf "%{buildroot}" install -d %{buildroot}%{_sbindir} find -perm 755 -type f -exec install -m755 {} %{buildroot}%{_sbindir}/ \; %clean [ "%{buildroot}" != / ] && rm -rf "%{buildroot}" %files %defattr(-,root,root) %{_sbindir}/check_wtmpx %{_sbindir}/chkdirs %{_sbindir}/chklastlog %{_sbindir}/chkproc %{_sbindir}/chkrootkit %{_sbindir}/chkutmp %{_sbindir}/chkwtmp %{_sbindir}/ifpromisc %{_sbindir}/strings-static %doc ACKNOWLEDGMENTS COPYRIGHT README* %changelog * Wed Jul 02 2014 Automatic Build System 0.50-1mamba - automatic update by autodist * Thu Aug 01 2013 Automatic Build System 0.49-2mamba - automatic rebuild by autodist * Sat Aug 08 2009 Automatic Build System 0.49-1mamba - automatic update by autodist * Sat Oct 04 2008 Silvan Calarco 0.48-1mamba - automatic update by autodist * Sat Aug 18 2007 Fabio Giani 0.47-1mamba - update to version 0.47 * Mon Nov 07 2005 Davide Madrisan 0.46a-1qilnx - update to version 0.46a by autospec - specfile updates * Fri Jul 09 2004 Silvan Calarco 0.43-1qilnx - first build