ports/68726: Chkrootkit is marked broken due false positives.

Luiz Eduardo Roncato Cordeiro cordeiro at nic.br
Tue Jul 6 15:20:20 UTC 2004


>Number:         68726
>Category:       ports
>Synopsis:       Chkrootkit is marked broken due false positives.
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          update
>Submitter-Id:   current-users
>Arrival-Date:   Tue Jul 06 15:20:19 GMT 2004
>Closed-Date:
>Last-Modified:
>Originator:     Luiz Eduardo Roncato Cordeiro
>Release:        FreeBSD 4.10-RELEASE i386
>Organization:
no
>Environment:
System: FreeBSD XXX 4.10-RELEASE FreeBSD 4.10-RELEASE #0: Fri May 28 18:22:01 UTC 2004 root@:/usr/src/sys/compile/PCATHLON i386


>Description:
         False positive in 3 chkrootkit tests.

         Checking `chfn'... INFECTED
         Checking `chsh'... INFECTED
         Checking `date'... INFECTED

         A new version will be released to correct these false
         positives.

>How-To-Repeat:
>Fix:

diff -ruN /usr/ports/security/chkrootkit.old/Makefile /usr/ports/security/chkrootkit/Makefile
--- /usr/ports/security/chkrootkit.old/Makefile	Tue Jul  6 12:03:33 2004
+++ /usr/ports/security/chkrootkit/Makefile	Tue Jul  6 12:03:00 2004
@@ -9,6 +9,7 @@
 PORTVERSION=	0.43
 CATEGORIES=	security
 MASTER_SITES=	ftp://ftp.pangeia.com.br/pub/seg/pac/
+BROKEN=         "Doesn't work with FreeBSD 4.10 and 5.X. Next release in few weeks."
 
 MAINTAINER=	cordeiro at nic.br
 COMMENT=	A tool to locally check for signs of a rootkit
>Release-Note:
>Audit-Trail:
>Unformatted:



More information about the freebsd-ports-bugs mailing list