git: 2e041d717a49 - main - security/rkhunter: Remove expired port

From: Rene Ladan <rene_at_FreeBSD.org>
Date: Wed, 31 Dec 2025 12:04:02 UTC
The branch main has been updated by rene:

URL: https://cgit.FreeBSD.org/ports/commit/?id=2e041d717a498e2f8233bc2701c807eb0a9aaf08

commit 2e041d717a498e2f8233bc2701c807eb0a9aaf08
Author:     Rene Ladan <rene@FreeBSD.org>
AuthorDate: 2025-12-31 12:03:42 +0000
Commit:     Rene Ladan <rene@FreeBSD.org>
CommitDate: 2025-12-31 12:03:42 +0000

    security/rkhunter: Remove expired port
    
    2025-12-31 security/rkhunter: Project abandoned in 2009
---
 MOVED                                             |  1 +
 security/Makefile                                 |  1 -
 security/rkhunter/Makefile                        | 58 ----------------
 security/rkhunter/distinfo                        |  3 -
 security/rkhunter/files/415.rkhunter.in           | 52 --------------
 security/rkhunter/files/patch-files_rkhunter      | 35 ----------
 security/rkhunter/files/patch-files_rkhunter.conf | 82 -----------------------
 security/rkhunter/files/patch-installer.sh        | 49 --------------
 security/rkhunter/pkg-descr                       | 12 ----
 security/rkhunter/pkg-message                     | 19 ------
 security/rkhunter/pkg-plist                       | 51 --------------
 11 files changed, 1 insertion(+), 362 deletions(-)

diff --git a/MOVED b/MOVED
index 957d5d525417..862ac8c0ed6e 100644
--- a/MOVED
+++ b/MOVED
@@ -4973,3 +4973,4 @@ www/unit-java||2025-12-31|Has expired: Upstream repo archived on Oct 8 2025
 deskutils/znotes||2025-12-31|Has expired: Abandonware, depends on legacy QT 5 and last release in 2011
 devel/arachne-pnr|devel/nextpnr|2025-12-31|Has expired: Superseded by devel/nextpnr
 graphics/jpgtn||2025-12-31|Has expired: obsolete historical tool, use imagemagick instead
+security/rkhunter||2025-12-31|Has expired: Project abandoned in 2009
diff --git a/security/Makefile b/security/Makefile
index 9411a1404044..fcd36a1cd104 100644
--- a/security/Makefile
+++ b/security/Makefile
@@ -1124,7 +1124,6 @@
     SUBDIR += rhash
     SUBDIR += ridl
     SUBDIR += rifiuti2
-    SUBDIR += rkhunter
     SUBDIR += rndpassw
     SUBDIR += rnp
     SUBDIR += rotate
diff --git a/security/rkhunter/Makefile b/security/rkhunter/Makefile
deleted file mode 100644
index cd7da12f552a..000000000000
--- a/security/rkhunter/Makefile
+++ /dev/null
@@ -1,58 +0,0 @@
-PORTNAME=	rkhunter
-PORTVERSION=	1.4.6
-PORTREVISION=	3
-CATEGORIES=	security
-MASTER_SITES=	SF
-
-MAINTAINER=	ports@FreeBSD.org
-COMMENT=	Rootkit detection tool
-WWW=		https://rkhunter.sourceforge.net
-
-LICENSE=	GPLv2+
-LICENSE_FILE=	${WRKSRC}/files/LICENSE
-
-DEPRECATED=		Project abandoned in 2009
-EXPIRATION_DATE=	2025-12-31
-
-OPTIONS_DEFINE=	LSOF NMAP DOCS
-OPTIONS_DEFAULT=LSOF
-
-RUN_DEPENDS+=	p5-Digest-SHA1>=0:security/p5-Digest-SHA1
-
-USES=		perl5 shebangfix
-SHEBANG_FILES=	files/check_modules.pl files/filehashsha.pl \
-		files/stat.pl
-NO_ARCH=	yes
-NO_BUILD=	yes
-SUB_FILES=	415.${PORTNAME}
-
-PORTDOCS=	ACKNOWLEDGMENTS CHANGELOG FAQ LICENSE README
-
-LSOF_RUN_DEPENDS=	lsof:sysutils/lsof
-NMAP_RUN_DEPENDS=	nmap:security/nmap
-
-post-patch:
-	@${REINPLACE_CMD} -i '' -e 's|{SHAREDIR}/man/man8|{PREFIX}/man/man8|g' \
-		${WRKSRC}/installer.sh
-	@${REINPLACE_CMD} -i '' -e 's|RKHPREFIX|${PREFIX}|g' \
-		${WRKSRC}/files/${PORTNAME}.conf
-
-do-install:
-	cd ${WRKSRC} && ./installer.sh --layout custom ${STAGEDIR}${PREFIX} --install
-	${INSTALL_MAN} ${WRKSRC}/files/${PORTNAME}.8 \
-		${STAGEDIR}${PREFIX}/share/man/man8
-	@${MKDIR} ${STAGEDIR}${PREFIX}/etc/periodic/security
-	${INSTALL_SCRIPT} ${WRKDIR}/415.${PORTNAME} ${STAGEDIR}${PREFIX}/etc/periodic/security
-	@${MKDIR} ${STAGEDIR}${DOCSDIR}
-	${INSTALL_DATA} ${PORTDOCS:S|^|${WRKSRC}/files/|} ${STAGEDIR}${DOCSDIR}
-	@${REINPLACE_CMD} -i '' -e 's|${STAGEDIR}||g' \
-		${STAGEDIR}${PREFIX}/bin/${PORTNAME} ${STAGEDIR}${PREFIX}/etc/${PORTNAME}.conf
-	${INSTALL_DATA} ${WRKSRC}/files/${PORTNAME}.conf ${STAGEDIR}${PREFIX}/etc/${PORTNAME}.conf.sample
-	${INSTALL_DATA} -m 640 ${WRKSRC}/files/programs_bad.dat ${STAGEDIR}${PREFIX}/var/lib/${PORTNAME}/db/programs_bad.dat.sample
-	${INSTALL_DATA} -m 640 ${WRKSRC}/files/mirrors.dat ${STAGEDIR}${PREFIX}/var/lib/${PORTNAME}/db/mirrors.dat.sample
-
-.for f in cn de en tr tr.utf8 zh zh.utf8 ja
-	${INSTALL_DATA} -m 640 ${WRKSRC}/files/i18n/${f} ${STAGEDIR}${PREFIX}/var/lib/${PORTNAME}/db/i18n/${f}.sample
-.endfor
-
-.include <bsd.port.mk>
diff --git a/security/rkhunter/distinfo b/security/rkhunter/distinfo
deleted file mode 100644
index 8ba8d2a83948..000000000000
--- a/security/rkhunter/distinfo
+++ /dev/null
@@ -1,3 +0,0 @@
-TIMESTAMP = 1539368101
-SHA256 (rkhunter-1.4.6.tar.gz) = f750aa3e22f839b637a073647510d7aa3adf7496e21f3c875b7a368c71d37487
-SIZE (rkhunter-1.4.6.tar.gz) = 302137
diff --git a/security/rkhunter/files/415.rkhunter.in b/security/rkhunter/files/415.rkhunter.in
deleted file mode 100644
index 4e33dc5ab443..000000000000
--- a/security/rkhunter/files/415.rkhunter.in
+++ /dev/null
@@ -1,52 +0,0 @@
-#!/bin/sh
-
-# This is a maintenance shell script for the rkhunter security tool.
-# You can enable this script in /etc/periodic.conf file by putting these lines into it:
-#	security_rkhunter_update_enable="YES"
-#	security_rkhunter_update_period="daily"
-#	security_rkhunter_update_flags="--update --nocolors"
-#	security_rkhunter_check_enable="YES"
-#	security_rkhunter_check_period="daily"
-#	security_rkhunter_check_flags="--checkall --nocolors --skip-keypress"
-#
-# Written by: Gabor Kovesdan <gabor@FreeBSD.org>
-
-if [ -r /etc/defaults/periodic.conf ]; then
-   . /etc/defaults/periodic.conf
-   source_periodic_confs
-fi
-
-# compatibility with pre-stable/12 style variables
-for type in update check
-do
-	for mode in enable flags
-	do
-		eval old=\"\$daily_rkhunter_${type}_${mode}\"
-		if test -n "$old"
-		then
-			echo "Warning: Variable \$daily_rkhunter_${type}_${mode} is deprecated, use \$security_rkhunter_${type}_${mode} instead." >&2
-			eval : \${security_rkhunter_${type}_${mode}:="\$daily_rkhunter_${type}_${mode}"}
-		fi
-	done
-done
-
-# defaults
-: ${security_rkhunter_update_period:="daily"}
-: ${security_rkhunter_check_period:="daily"}
-: ${security_rkhunter_update_flags:="--update --nocolors"}
-: ${security_rkhunter_check_flags:="--checkall --nocolors --skip-keypress"}
-
-if check_yesno_period security_rkhunter_update_enable
-then
-	echo ""
-	echo "Updating the rkhunter database..."
-	anticongestion
-	%%PREFIX%%/bin/rkhunter ${security_rkhunter_update_flags}
-fi
-
-if check_yesno_period security_rkhunter_check_enable
-then
-	echo ""
-	echo "Running rkhunter..."
-	%%PREFIX%%/bin/rkhunter ${security_rkhunter_check_flags}
-fi
diff --git a/security/rkhunter/files/patch-files_rkhunter b/security/rkhunter/files/patch-files_rkhunter
deleted file mode 100644
index 616c589ae112..000000000000
--- a/security/rkhunter/files/patch-files_rkhunter
+++ /dev/null
@@ -1,35 +0,0 @@
---- files/rkhunter.orig	2018-02-24 23:08:27 UTC
-+++ files/rkhunter
-@@ -4750,7 +4750,12 @@ get_sha_hash_function() {
- 		return
- 	fi
- 
--	HFUNC=`find_cmd sha${SHA_SIZE}sum`
-+	case ${OPERATING_SYSTEM} in
-+	FreeBSD)
-+		HFUNC=`find_cmd sha${SHA_SIZE}` ;;
-+	*)
-+		HFUNC=`find_cmd sha${SHA_SIZE}sum` ;;
-+	esac
- 
- 	if [ -z "${HFUNC}" ]; then
- 		HFUNC=`find_cmd sha${SHA_SIZE}`
-@@ -7522,6 +7527,9 @@ download_file() {
- 		rm -f "${OUTPUT_FILE}" >/dev/null 2>&1
- 
- 		case "${RKHWEBCMD_BASE}" in
-+		fetch)
-+			CMD="${RKHWEBCMD} ${RKHWEBCMD_OPTS} -q -o \"${OUTPUT_FILE}\" ${MIRROR}${URL} 2>/dev/null"
-+			;;
- 		wget)
- 			CMD="${RKHWEBCMD} ${RKHWEBCMD_OPTS} -q -O \"${OUTPUT_FILE}\" ${MIRROR}${URL} 2>/dev/null"
- 			;;
-@@ -18557,7 +18560,7 @@ REQCMDS="awk cat chmod chown cp cut date egrep grep he
- # List of commands used to download files from the web. This list is 
- # used by the '--update' and '--versioncheck' options. Preferred commands
- # are listed first. This can be overridden by the config file.
--WEBCMDLIST="wget curl elinks links lynx bget GET"
-+WEBCMDLIST="fetch wget curl elinks links lynx bget GET"
- 
- RKHWEBCMD=""
- RKHWEBCMD_OPTS=""
diff --git a/security/rkhunter/files/patch-files_rkhunter.conf b/security/rkhunter/files/patch-files_rkhunter.conf
deleted file mode 100644
index 0f2c5398ce72..000000000000
--- a/security/rkhunter/files/patch-files_rkhunter.conf
+++ /dev/null
@@ -1,82 +0,0 @@
---- files/rkhunter.conf.orig	2014-01-25 21:29:51 UTC
-+++ files/rkhunter.conf
-@@ -154,7 +154,7 @@
- # subsequently commented out or removed, then the program will assume a
- # default directory beneath the installation directory.
- #
--#TMPDIR=/var/lib/rkhunter/tmp
-+TMPDIR=RKHPREFIX/var/lib/rkhunter/tmp
- 
- #
- # This option specifies the database directory to use.
-@@ -163,7 +163,7 @@
- # subsequently commented out or removed, then the program will assume a
- # default directory beneath the installation directory.
- #
--#DBDIR=/var/lib/rkhunter/db
-+DBDIR=RKHPREFIX/var/lib/rkhunter/db
- 
- #
- # This option specifies the script directory to use.
-@@ -171,7 +171,7 @@
- # The installer program will set the default directory. If this default is
- # subsequently commented out or removed, then the program will not run.
- #
--#SCRIPTDIR=/usr/local/lib/rkhunter/scripts
-+SCRIPTDIR=RKHPREFIX/lib/rkhunter/scripts
- 
- #
- # This option can be used to modify the command directory list used by rkhunter
-@@ -303,7 +303,7 @@ AUTO_X_DETECT=1
- #
- # The default value is 'no'.
- #
--#ALLOW_SSH_ROOT_USER=no
-+ALLOW_SSH_ROOT_USER=unset
- 
- #
- # Set this option to '1' to allow the use of the SSH-1 protocol, but note
-@@ -317,7 +317,7 @@ AUTO_X_DETECT=1
- #
- # The default value is '0'.
- #
--#ALLOW_SSH_PROT_V1=0
-+ALLOW_SSH_PROT_V1=2
- 
- #
- # This setting tells rkhunter the directory containing the SSH configuration
-@@ -575,6 +575,8 @@ DISABLE_TESTS=suspscan hidden_ports hidden_procs delet
- # The default value is the null string.
- #
- #SCRIPTWHITELIST=/usr/bin/groups
-+SCRIPTWHITELIST=/usr/bin/whatis
-+SCRIPTWHITELIST=/usr/sbin/adduser
- 
- #
- # Allow the specified file to have the immutable attribute set.
-@@ -584,6 +586,10 @@ DISABLE_TESTS=suspscan hidden_ports hidden_procs delet
- # The default value is the null string.
- #
- #IMMUTWHITELIST=/sbin/ifdown
-+IMMUTWHITELIST=/usr/bin/login
-+IMMUTWHITELIST=/usr/bin/passwd
-+IMMUTWHITELIST=/usr/bin/su
-+IMMUTWHITELIST=/sbin/init
- 
- #
- # If this option is set to '1', then the immutable-bit test is reversed. That
-@@ -787,6 +793,7 @@ DISABLE_TESTS=suspscan hidden_ports hidden_procs delet
- # The default value is the null string.
- #
- #UID0_ACCOUNTS=toor rooty
-+UID0_ACCOUNTS=toor
- 
- #
- # This option allows the specified accounts to have no password. NIS/YP entries
-@@ -1222,3 +1229,6 @@ DISABLE_TESTS=suspscan hidden_ports hidden_procs delet
- #
- #EMPTY_LOGFILES=""
- #MISSING_LOGFILES=""
-+
-+INSTALLDIR=RKHPREFIX
-+USER_FILEPROP_FILES_DIRS=RKHPREFIX/etc/rkhunter.conf
diff --git a/security/rkhunter/files/patch-installer.sh b/security/rkhunter/files/patch-installer.sh
deleted file mode 100644
index 56b620aa2a1a..000000000000
--- a/security/rkhunter/files/patch-installer.sh
+++ /dev/null
@@ -1,49 +0,0 @@
---- installer.sh.orig	2018-02-19 23:49:06 UTC
-+++ installer.sh
-@@ -393,7 +393,7 @@ selectTemplate() { # Take input from the "--install pa
- 	RKHINST_ETC_DIR="${SYSCONFIGDIR}"
- 	RKHINST_BIN_DIR="${BINDIR}"
- 	RKHINST_SCRIPT_DIR="${LIBDIR}/${APPNAME}/scripts"
--	RKHINST_MAN_DIR="${SHAREDIR}/man/man8"
-+	RKHINST_MAN_DIR="${PREFIX}/share/man/man8"
- 
- 	if [ "${RKHINST_LAYOUT}" = "oldschool" ]; then
- 		RKHINST_DB_DIR="${VARDIR}/${APPNAME}/db"
-@@ -407,12 +407,12 @@ selectTemplate() { # Take input from the "--install pa
- 	elif [ "${RKHINST_LAYOUT}" = "TXZ" ]; then
- 		RKHINST_DB_DIR="${VARDIR}/lib/${APPNAME}/db"
- 		RKHINST_TMP_DIR="${VARDIR}/lib/${APPNAME}/tmp"
--		RKHINST_DOC_DIR="${PREFIX}/doc/${APPNAME}-${APPVERSION}"
-+		RKHINST_DOC_DIR="${PREFIX}/doc/${APPNAME}"
- 		RKHINST_MAN_DIR="${PREFIX}/man/man8"
- 	else
- 		RKHINST_DB_DIR="${VARDIR}/lib/${APPNAME}/db"
- 		RKHINST_TMP_DIR="${VARDIR}/lib/${APPNAME}/tmp"
--		RKHINST_DOC_DIR="${SHAREDIR}/doc/${APPNAME}-${APPVERSION}"
-+		RKHINST_DOC_DIR="${SHAREDIR}/doc/${APPNAME}"
- 	fi
- 
- 	RKHINST_LANG_DIR="${RKHINST_DB_DIR}/i18n"
-@@ -1070,22 +1070,6 @@ doRemove()  {
- 			fi
- 		fi
- 	done
--
--
--	# Application
--	for FILE in ${RKHINST_BIN_FILES}; do
--		if [ -f "${RKHINST_BIN_DIR}/${FILE}" ]; then
--			rm -f "${RKHINST_BIN_DIR}/${FILE}" >/dev/null 2>&1
--			ERRCODE=$?
--
--			if [ $ERRCODE -eq 0 ]; then
--				echo " Removing ${RKHINST_BIN_DIR}/${FILE}: OK"
--			else
--				echo " Removing ${RKHINST_BIN_DIR}/${FILE}: FAILED: Code $ERRCODE"
--			fi
--		fi
--	done
--
- 
- 	# Configuration file
- 	for FILE in ${RKHINST_ETC_FILE}; do
diff --git a/security/rkhunter/pkg-descr b/security/rkhunter/pkg-descr
deleted file mode 100644
index 22cfd9c00463..000000000000
--- a/security/rkhunter/pkg-descr
+++ /dev/null
@@ -1,12 +0,0 @@
-Rootkit Hunter is scanning tool to ensure you for about 99.9% you're
-clean of nasty tools.
-
-This tool scans for rootkits, backdoors and local exploits by running
-tests like:
-
-- MD5/SHA1 hash compare
-- Look for default files used by rootkits
-- Wrong file permissions for binaries
-- Look for suspected strings in LKM and KLD modules
-- Look for hidden files
-- Optional scan within plaintext and binary files
diff --git a/security/rkhunter/pkg-message b/security/rkhunter/pkg-message
deleted file mode 100644
index 3a4a2f1bb6ad..000000000000
--- a/security/rkhunter/pkg-message
+++ /dev/null
@@ -1,19 +0,0 @@
-[
-{ type: install
-  message: <<EOM
-You should keep your rkhunter database up-to-date.
-This can be done automatically by putting this line to periodic.conf(5) files:
-
-security_rkhunter_update_enable="YES"
-security_rkhunter_update_period="daily"
-security_rkhunter_update_flags="--update --nocolors"
-
-Also, you can run rkhunter as a part of the daily security check by
-putting this line to periodic.conf(5) files:
-
-security_rkhunter_check_enable="YES"
-security_rkhunter_check_period="daily"
-security_rkhunter_check_flags="--checkall --nocolors --skip-keypress"
-EOM
-}
-]
diff --git a/security/rkhunter/pkg-plist b/security/rkhunter/pkg-plist
deleted file mode 100644
index 56ee51c710a5..000000000000
--- a/security/rkhunter/pkg-plist
+++ /dev/null
@@ -1,51 +0,0 @@
-bin/rkhunter
-etc/periodic/security/415.rkhunter
-@sample etc/rkhunter.conf.sample
-lib/rkhunter/scripts/check_modules.pl
-lib/rkhunter/scripts/filehashsha.pl
-lib/rkhunter/scripts/readlink.sh
-lib/rkhunter/scripts/stat.pl
-share/man/man8/rkhunter.8.gz
-var/lib/rkhunter/db/backdoorports.dat
-@sample var/lib/rkhunter/db/i18n/cn.sample
-@sample var/lib/rkhunter/db/i18n/de.sample
-@sample var/lib/rkhunter/db/i18n/en.sample
-@sample var/lib/rkhunter/db/i18n/tr.sample
-@sample var/lib/rkhunter/db/i18n/tr.utf8.sample
-@sample var/lib/rkhunter/db/i18n/zh.sample
-@sample var/lib/rkhunter/db/i18n/zh.utf8.sample
-@sample var/lib/rkhunter/db/i18n/ja.sample
-@sample var/lib/rkhunter/db/mirrors.dat.sample
-@sample var/lib/rkhunter/db/programs_bad.dat.sample
-var/lib/rkhunter/db/signatures/RKH_BillGates.ldb
-var/lib/rkhunter/db/signatures/RKH_Glubteba.ldb
-var/lib/rkhunter/db/signatures/RKH_MMD-0028-2014.ldb
-var/lib/rkhunter/db/signatures/RKH_dso.ldb
-var/lib/rkhunter/db/signatures/RKH_iptablex.ldb
-var/lib/rkhunter/db/signatures/RKH_jynx.ldb
-var/lib/rkhunter/db/signatures/RKH_kbeast.ldb
-var/lib/rkhunter/db/signatures/RKH_libkeyutils.ldb
-var/lib/rkhunter/db/signatures/RKH_libkeyutils1.ldb
-var/lib/rkhunter/db/signatures/RKH_libncom.ldb
-var/lib/rkhunter/db/signatures/RKH_pamunixtrojan.ldb
-var/lib/rkhunter/db/signatures/RKH_shv.ldb
-var/lib/rkhunter/db/signatures/RKH_sniffer.ldb
-var/lib/rkhunter/db/signatures/RKH_sshd.ldb
-var/lib/rkhunter/db/signatures/RKH_turtle.ldb
-var/lib/rkhunter/db/signatures/RKH_xsyslog.ldb
-var/lib/rkhunter/db/suspscan.dat
-@postunexec rm -f %D/var/lib/rkhunter/db/rkhunter_prop_list.dat 2> /dev/null || true
-@postunexec rm -f %D/var/lib/rkhunter/db/rkhunter.dat* 2> /dev/null || true
-@comment var/lib/rkhunter/tmp/group
-@comment var/lib/rkhunter/tmp/passwd
-@postexec cp /etc/passwd %D/var/lib/rkhunter/tmp/passwd 2> /dev/null || true
-@postunexec rm -f %D/var/lib/rkhunter/tmp/passwd 2> /dev/null || true
-@postexec cp /etc/group %D/var/lib/rkhunter/tmp/group 2> /dev/null || true
-@postunexec rm -f %D/var/lib/rkhunter/tmp/group 2> /dev/null || true
-@dir(,,0750) lib/rkhunter/scripts
-@dir(,,0750) lib/rkhunter
-@dir(,,0750) var/lib/rkhunter/db/i18n
-@dir(,,0750) var/lib/rkhunter/db/signatures
-@dir(,,0750) var/lib/rkhunter/db
-@dir(,,0750) var/lib/rkhunter/tmp
-@dir(,,0750) var/lib/rkhunter