Port details |
- chkrootkit Tool to locally check for signs of a rootkit
- 0.58b security =114 0.58bVersion of this port present on the latest quarterly branch.
- Maintainer: lacey.leanne@gmail.com
- Port Added: 2001-04-06 21:48:49
- Last Update: 2023-07-28 10:55:57
- Commit Hash: 8bc4be7
- People watching this port, also watch:: nmap, gmake, unzip, libiconv, expat
- License: BSD2CLAUSE
- WWW:
- http://www.chkrootkit.org/
- Description:
- Chkrootkit is a tool to locally check for signs of a rootkit.
-------------------------------------------------------------
It contains:
* chkrootkit: a shell script that checks system binaries for
rootkit modification.
* ifpromisc.c: checks if the network interface is in promiscuous
mode.
* chklastlog.c: checks for lastlog deletions.
* chkwtmp.c: checks for wtmp deletions.
* check_wtmpx.c: checks for wtmpx deletions. (Solaris only)
* chkproc.c: checks for signs of LKM trojans.
* chkdirs.c: checks for signs of LKM trojans.
* strings.c: quick and dirty strings replacement.
* chkutmp.c: checks for utmp deletions.
For an updated list of rootkits, worms and LKMs detected by
chkrootkit please visit: http://www.chkrootkit.org/
Nelson Murilo <nmurilo@gmail.com>
Klaus Steding-Jessen <jessen@cert.br>
- ¦ ¦ ¦ ¦
- Manual pages:
- FreshPorts has no man page information for this port.
- pkg-plist: as obtained via:
make generate-plist - Dependency lines:
-
- chkrootkit>0:security/chkrootkit
- To install the port:
- cd /usr/ports/security/chkrootkit/ && make install clean
- To add the package, run one of these commands:
- pkg install security/chkrootkit
- pkg install chkrootkit
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: chkrootkit
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1690489500
SHA256 (chkrootkit-0.58b.tar.gz) = 75ed2ace81f0fa3e9c3fb64dab0e8857ed59247ea755f5898416feb2c66807b9
SIZE (chkrootkit-0.58b.tar.gz) = 42957
Packages (timestamps in pop-ups are UTC):
- This port has no dependencies.
- There are no ports dependent upon this port
Configuration Options:
- ===> The following configuration options are available for chkrootkit-0.58b:
DOCS=on: Build and/or install documentation
===> Use 'make config' to modify these settings
- Options name:
- security_chkrootkit
- USES:
- cpe
- FreshPorts was unable to extract/find any pkg message
- Master Sites:
|
Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
Commit | Credits | Log message |
0.58b 28 Jul 2023 10:55:57 |
Renato Botelho (garga) |
security/chkrootkit: Update to 0.58b
While here, update authors email addresses to current ones listed at
project website and sort Makefile items to make portclippy happy
PR: 272764
Approved by: maintainer
Sponsored by: Rubicon Communications, LLC ("Netgate") |
0.55 27 Jul 2023 20:22:16 |
Renato Botelho (garga) |
security/chkrootkit: Make it fetchable again
Update MASTER_SITES to new FTP address ftp.chkrootkit.org
Approved by: portmgr-lurkers (blanket) |
07 Sep 2022 21:58:51 |
Stefan Eßer (se) |
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner) |
0.55 07 Sep 2022 21:10:59 |
Stefan Eßer (se) |
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above ) |
0.55 20 Jul 2022 14:22:56 |
Tobias C. Berner (tcberner) |
security: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ports@c0decafe.net>
* Aaron Dalton <aaron@FreeBSD.org>
* Adam Weinberger <adamw@FreeBSD.org>
* Ade Lovett <ade@FreeBSD.org>
* Aldis Berjoza <aldis@bsdroot.lv>
* Alex Dupre <ale@FreeBSD.org>
* Alex Kapranoff <kappa@rambler-co.ru>
* Alex Samorukov <samm@freebsd.org>
* Alexander Botero-Lowry <alex@foxybanana.com>
* Alexander Kriventsov <avk@vl.ru>
* Alexander Leidinger <netchild@FreeBSD.org> (Only the first 15 lines of the commit message are shown above ) |
0.55 21 Feb 2022 22:20:22 |
Guangyuan Yang (ygy) Author: Lacey Powers |
security/chkrootkit: Update to 0.55
PR: 262097 |
0.53 31 Aug 2021 09:23:06 |
Bernhard Froehlich (decke) |
security/chkrootkit: Add CPE information
Approved by: portmgr (blanket) |
0.53 06 Apr 2021 14:31:07 |
Mathieu Arnold (mat) |
Remove # $FreeBSD$ from Makefiles. |
0.53 08 Apr 2019 20:34:39 |
swills |
security/chkrootkit: update to 0.53
PR: 237003
Submitted by: Lacey Powers <lacey.leanne@gmail.com> (maintainer) |
0.52 12 Oct 2017 21:45:25 |
dbaio |
security/chkrootkit: Update to 0.52
While here, add LICENSE_FILE.
PR: 222926
Submitted by: Lacey Powers <lacey.leanne@gmail.com> (maintainer) |
0.51 29 Nov 2016 23:13:07 |
junovitch |
security/chkrootkit: follow-up on r427350; MASTER_SITES cleanup
PR: 214416
Submitted by: Lacey Powers <lacey.leanne@gmail.com> (maintainer) |
0.51 29 Nov 2016 00:40:45 |
junovitch |
security/chkrootkit: update 0.50 -> 0.51
PR: 214416
Submitted by: Lacey Powers <lacey.leanne@gmail.com> (maintainer) |
0.50 11 Jul 2015 14:40:20 |
riggs |
- Revive security/chkrootkit
- Update to upstream version 0.50
- Port has a new maintainer: Lacey Powers <lacey.leanne@gmail.com>
PR: 201297
Submitted by: lacey.leanne@gmail.com (maintainer)
Reviewed by: koobs |
0.49 24 Jul 2014 18:36:20 |
rene |
Remove expired ports:
2014-07-23 chinese/big5con: Fails to build with new utmpx
2014-07-23 chinese/hztty: Fails to build with new utmpx
2014-07-23 irc/solid-ircd: Fails to build with new utmpx
2014-07-23 korean/eterm: Fails to build with new utmpx
2014-07-23 mail/biffer: Fails to build with new utmpx
2014-07-23 misc/c-hey: Fails to build with new utmpx
2014-07-23 misc/wminfo: Fails to build with new utmpx
2014-07-23 net/sendfile: Fails to build with new utmpx
2014-07-23 net-im/centericq: Fails to build with new utmpx
2014-07-23 security/chkrootkit: Fails to build with new utmpx
2014-07-23 security/openfwtk: Fails to build with new utmpx
2014-07-23 security/pam_alreadyloggedin: Fails to build with new utmpx
2014-07-23 security/srp: Fails to build with new utmpx
2014-07-23 security/sud: Fails to build with new utmpx
2014-07-23 sysutils/hyperic-sigar: Fails to build with new utmpx
2014-07-23 sysutils/lookupd: Fails to build with new utmpx
2014-07-23 sysutils/lookupd_ldap: Fails to build with new utmpx
2014-07-23 sysutils/p5-Sys-Utmp: Fails to build with new utmpx
2014-07-23 sysutils/syslog-ng2: Fails to build with new utmpx
2014-07-23 sysutils/yawho: Fails to build with new utmpx |
0.49 23 Jun 2014 20:39:15 |
antoine |
Deprecate ports failing to build with new utmpx
Maintainers had more than 4 years to fix them
With hat: portmgr |
0.49 01 May 2014 02:33:07 |
adamw |
I experienced catastrophic brain failure and put
PORT_OPTIONS= instead of OPTIONS_DEFINE=. Oops. |
0.49 01 May 2014 01:42:38 |
adamw |
STAGE support, and general cleanups. Some of the changes are a
bit more aggressive, but at this point, if I'm staging your port,
you've likely stopped caring what's done to it. |
0.49 20 Sep 2013 22:55:26 |
bapt |
Add NO_STAGE all over the place in preparation for the staging support (cat:
security) |
0.49 29 Mar 2013 19:33:42 |
cs |
- Remove A/An in COMMENT
- Trim Header where applicable |
0.49 03 Jul 2011 14:03:52 |
ohauer |
-remove MD5 |
0.49 20 Mar 2010 14:06:20 |
miwi |
- Mark BROKEN on HEAD: fails to build with new utmpx
Reported by: pointyhat |
0.49 19 Aug 2009 00:33:23 |
araujo |
- Update to 0.49.
PR: ports/137853
Submitted by: Sylvio Cesar <scjamorim@bsd.com.br>
Approved by: Luiz Eduardo Roncato Cordeiro <cordeiro@cert.br> (maintainer) |
0.48 24 Jul 2008 12:00:10 |
garga |
No functional changes, just try to make Makefile a bit better:
- Remove conditional to set PORTDOCS
- s/pre-patch/post-patch/
- Change Makefile's reinplace to use ?= instead of comment CC and CFLAGS lines
and remove MAKE_ENV declaration
- Remove redundances of program names, just set it one time and use the vars to
repeat names
Approved by: maintainer by email |
0.48 25 Apr 2008 19:04:08 |
miwi |
- Respect CC
PR: 122941
Submitted by: Frank Fenor <frank@fenor.de>
Approved by: maintainer |
0.48 27 Dec 2007 17:19:23 |
tabthorpe |
- Update to 0.48
- Remove pre-everything (no more false positives)
- Remove patches (extra_patches and patch in files directory)
PR: ports/118930
Submitted by: Philippe Audeoud <jadawin tuxaco.net>
Approved by: Luiz Eduardo Roncato Cordeiro <cordeiro nic.br> (maintainer) |
0.47 24 Nov 2006 22:58:31 |
miwi |
- Update to 0.47
PR: ports/105816
Submitted by: Luiz Eduardo Roncato Cordeiro <cordeiro@cert.br> (maintainer) |
0.46a 13 May 2006 04:15:53 |
edwin |
Remove USE_REINPLACE from all categories starting with S |
0.46a 24 Jan 2006 01:03:33 |
edwin |
SHA256ify
Approved by: krion@ |
0.46a 28 Oct 2005 16:50:11 |
garga |
- Unbreak: Update to 0.46a
Approved by: maintainer |
0.46 28 Oct 2005 12:07:36 |
garga |
chkproc sends a 25 signal to init causing a reboot after a 30s sleep
Mark it as BROKEN until the problem is fixed.
Submitted by: maintainer (by email) |
0.46 27 Oct 2005 14:30:29 |
garga |
- Update to 0.46
Approved by: maintainer |
0.45 14 Apr 2005 18:42:15 |
leeym |
- Update to chkrookit version 0.45 [1]
- utilize PORTDOCS, DOCSDIR and PLIST_FILES
PR: [1] 79865
Submitted by: [1] Luiz Eduardo Roncato Cordeiro <cordeiro@nic.br> |
0.44 02 Sep 2004 11:42:23 |
pav |
- Update to 0.44
PR: ports/71249
Submitted by: Luiz Eduardo Roncato Cordeiro <cordeiro@nic.br> (maintainer) |
0.43 06 Jul 2004 15:27:51 |
pav |
- Mark IGNORE for now
PR: ports/68726
Submitted by: Luiz Eduardo Roncato Cordeiro <cordeiro@nic.br> (maintainer) |
0.43 31 Mar 2004 03:12:58 |
trevor |
SIZEify (maintainer timeout) |
0.43 10 Feb 2004 21:35:03 |
linimon |
Update to 0.43:
C++ comments removed from chkproc.c. New rootkits detected: AjaKit
and zaRwT. New CGI backdoors detected. ifpromisc.c: better detection
of promisc mode on newer Linux kernels. New command line option
(-n) to skip NFS mounted dirs. Minor bug corrections.
PR: ports/62577
Submitted by: Luiz E. R. Cordeiro <cordeiro@nic.br> (maintainer) |
0.42b 01 Oct 2003 21:08:48 |
krion |
- Update to version 0.42b
PR: 57477
Submitted by: maintainer |
0.42 26 Sep 2003 22:08:33 |
edwin |
Update port: security/chkrootkit: upgrade to version 0.42
Version upgrade from 0.41 to 0.42.
It works on FreeBSD 2.2.X, 3.X, 4.X and 5.X.
PR: ports/56757
Submitted by: Luiz Eduardo Roncato Cordeiro <cordeiro@nic.br> |
0.41 04 Sep 2003 13:03:05 |
edwin |
Teach security/chkrootkit
I finnaly got fed up with that FAQ about chkrootkit. The
solution was either to add a Q+A to the FAQ or fix the port.
This introduce a new variable, FreeBSD5, that is set to
"yes" if we're running FreeBSD 5 or higher.
This variable is used to fix the tests of the following
binaries, so they would DTRT on FreeBSD 5: chfn chsh date
ls ps
I also fixed a bug in the cheking of vdir, but it's irrelevant
for FreeBSD.
Informed maintainer.
PR: ports/55919
Submitted by: Yonatan@xpert.com <Yonatan@xpert.com> |
0.41 15 Aug 2003 06:17:17 |
kris |
Mark IGNORE on 5.x: chkrootkit reports false positives
Inspired by: Yet another "have I been hacked" email on questions@ |
0.41 25 Jun 2003 16:40:08 |
mich |
Update to 0.41
PR: 53675
Submitted by: maintainer
Approved by: roberto (mentor) |
0.40 09 Apr 2003 08:22:12 |
kevlo |
Update to 0.40
PR: 50722
Submitted by: Michael L. Hostbaek <mich@freebsdcluster.org> |
0.39a 21 Feb 2003 13:26:58 |
knu |
De-pkg-comment. |
0.39a 02 Feb 2003 13:40:14 |
nork |
Update to 0.39a.
PR: ports/47735
Submitted by: Luiz Eduardo Roncato Cordeiro <cordeiro@luinil.nic.br>
(maintainer) |
0.38 11 Jan 2003 03:18:51 |
pat |
Update to 0.38
PR: ports/46952
Submitted by: maintainer |
0.37 04 Nov 2002 02:15:27 |
edwin |
PERL -> REINPLACE
Noticed on: bento |
0.37 25 Oct 2002 20:48:02 |
obraun |
Upgrade to 0.37.
PR: 44468
Submitted by: maintainer |
0.36 18 Jun 2002 23:49:08 |
pat |
Update to 0.36
PR: ports/39475
Submitted by: maintainer |
01 Feb 2002 04:06:34 |
pat |
Update to 0.35 |
22 Sep 2001 07:44:05 |
sf |
update to 0.34. |
11 May 2001 15:34:08 |
kevlo |
Update to 0.32 |
27 Apr 2001 13:05:10 |
ijliao |
sorry for missing PR and submitter |
27 Apr 2001 13:01:58 |
ijliao |
change WWW: to the real site |
17 Apr 2001 13:13:09 |
roam |
Update to 0.31, lots of cleanup, add NOPORTDOCS handling. |
17 Apr 2001 06:56:57 |
will |
Fix checksum problem on bento by updating to 0.31. Also start using the
versioned distfiles since they are available. |
07 Apr 2001 01:48:49 |
will |
Add chkrootkit 0.30, a tool to locally check for signs of a rootkit. |