Port details |
- chkrootkit Tool to locally check for signs of a rootkit
- 0.55 security
=112 0.55Version of this port present on the latest quarterly branch. - Maintainer: lacey.leanne@gmail.com
 - Port Added: 2001-04-06 21:48:49
- Last Update: 2022-02-21 22:20:22
- Commit Hash: e5f84f7
- People watching this port, also watch:: gmake, nmap, libiconv, unzip
- License: BSD2CLAUSE
- Description:
- Chkrootkit is a tool to locally check for signs of a rootkit.
-------------------------------------------------------------
It contains:
* chkrootkit: a shell script that checks system binaries for
rootkit modification.
* ifpromisc.c: checks if the network interface is in promiscuous
mode.
* chklastlog.c: checks for lastlog deletions.
* chkwtmp.c: checks for wtmp deletions.
* check_wtmpx.c: checks for wtmpx deletions. (Solaris only)
* chkproc.c: checks for signs of LKM trojans.
* chkdirs.c: checks for signs of LKM trojans.
* strings.c: quick and dirty strings replacement.
* chkutmp.c: checks for utmp deletions.
For an updated list of rootkits, worms and LKMs detected by
chkrootkit please visit: http://www.chkrootkit.org/
Nelson Murilo <nelson@pangeia.com.br>
Klaus Steding-Jessen <jessen@nic.br>
WWW: http://www.chkrootkit.org/
- SVNWeb : git : Homepage
- pkg-plist: as obtained via:
make generate-plist - Dependency lines:
-
- chkrootkit>0:security/chkrootkit
- To install the port:
- cd /usr/ports/security/chkrootkit/ && make install clean
- To add the package, run one of these commands:
- pkg install security/chkrootkit
- pkg install chkrootkit
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: chkrootkit
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1634246676
SHA256 (chkrootkit-0.55.tar.gz) = a81c0286ec449313f953701202a00e81b204fc2cf43e278585a11c12a5e0258b
SIZE (chkrootkit-0.55.tar.gz) = 42630
- Packages (timestamps in pop-ups are UTC):
- There are no ports dependent upon this port
- Configuration Options:
- ===> The following configuration options are available for chkrootkit-0.55:
DOCS=on: Build and/or install documentation
===> Use 'make config' to modify these settings
- Options name:
- security_chkrootkit
- USES:
- cpe
- FreshPorts was unable to extract/find any pkg message
- Master Sites:
|
Commit History - (may be incomplete: see SVNWeb link above for full details) |
Date | By | Description |
21 Feb 2022 22:20:22 0.55
|
Guangyuan Yang (ygy)  Author: Lacey Powers |
security/chkrootkit: Update to 0.55
PR: 262097 |
31 Aug 2021 09:23:06 0.53
|
Bernhard Froehlich (decke)  |
security/chkrootkit: Add CPE information
Approved by: portmgr (blanket) |
06 Apr 2021 14:31:07 0.53
|
Mathieu Arnold (mat)  |
Remove # $FreeBSD$ from Makefiles. |
08 Apr 2019 20:34:39
0.53
|
swills  |
security/chkrootkit: update to 0.53
PR: 237003
Submitted by: Lacey Powers <lacey.leanne@gmail.com> (maintainer) |
12 Oct 2017 21:45:25
0.52
|
dbaio  |
security/chkrootkit: Update to 0.52
While here, add LICENSE_FILE.
PR: 222926
Submitted by: Lacey Powers <lacey.leanne@gmail.com> (maintainer) |
29 Nov 2016 23:13:07
0.51
|
junovitch  |
security/chkrootkit: follow-up on r427350; MASTER_SITES cleanup
PR: 214416
Submitted by: Lacey Powers <lacey.leanne@gmail.com> (maintainer) |
29 Nov 2016 00:40:45
0.51
|
junovitch  |
security/chkrootkit: update 0.50 -> 0.51
PR: 214416
Submitted by: Lacey Powers <lacey.leanne@gmail.com> (maintainer) |
11 Jul 2015 14:40:20
0.50
|
riggs  |
- Revive security/chkrootkit
- Update to upstream version 0.50
- Port has a new maintainer: Lacey Powers <lacey.leanne@gmail.com>
PR: 201297
Submitted by: lacey.leanne@gmail.com (maintainer)
Reviewed by: koobs |
24 Jul 2014 18:36:20
0.49
|
rene  |
Remove expired ports:
2014-07-23 chinese/big5con: Fails to build with new utmpx
2014-07-23 chinese/hztty: Fails to build with new utmpx
2014-07-23 irc/solid-ircd: Fails to build with new utmpx
2014-07-23 korean/eterm: Fails to build with new utmpx
2014-07-23 mail/biffer: Fails to build with new utmpx
2014-07-23 misc/c-hey: Fails to build with new utmpx
2014-07-23 misc/wminfo: Fails to build with new utmpx
2014-07-23 net/sendfile: Fails to build with new utmpx
2014-07-23 net-im/centericq: Fails to build with new utmpx
2014-07-23 security/chkrootkit: Fails to build with new utmpx
2014-07-23 security/openfwtk: Fails to build with new utmpx
2014-07-23 security/pam_alreadyloggedin: Fails to build with new utmpx
2014-07-23 security/srp: Fails to build with new utmpx
2014-07-23 security/sud: Fails to build with new utmpx
2014-07-23 sysutils/hyperic-sigar: Fails to build with new utmpx
2014-07-23 sysutils/lookupd: Fails to build with new utmpx
2014-07-23 sysutils/lookupd_ldap: Fails to build with new utmpx
2014-07-23 sysutils/p5-Sys-Utmp: Fails to build with new utmpx
2014-07-23 sysutils/syslog-ng2: Fails to build with new utmpx
2014-07-23 sysutils/yawho: Fails to build with new utmpx |
23 Jun 2014 20:39:15
0.49
|
antoine  |
Deprecate ports failing to build with new utmpx
Maintainers had more than 4 years to fix them
With hat: portmgr |
01 May 2014 02:33:07
0.49
|
adamw  |
I experienced catastrophic brain failure and put
PORT_OPTIONS= instead of OPTIONS_DEFINE=. Oops. |
01 May 2014 01:42:38
0.49 
|
adamw  |
STAGE support, and general cleanups. Some of the changes are a
bit more aggressive, but at this point, if I'm staging your port,
you've likely stopped caring what's done to it. |
20 Sep 2013 22:55:26
0.49
|
bapt  |
Add NO_STAGE all over the place in preparation for the staging support (cat:
security) |
29 Mar 2013 19:33:42
0.49
|
cs  |
- Remove A/An in COMMENT
- Trim Header where applicable |
03 Jul 2011 14:03:52
0.49
|
ohauer  |
-remove MD5 |
20 Mar 2010 14:06:20
0.49
|
miwi  |
- Mark BROKEN on HEAD: fails to build with new utmpx
Reported by: pointyhat |
19 Aug 2009 00:33:23
0.49
|
araujo  |
- Update to 0.49.
PR: ports/137853
Submitted by: Sylvio Cesar <scjamorim@bsd.com.br>
Approved by: Luiz Eduardo Roncato Cordeiro <cordeiro@cert.br> (maintainer) |
24 Jul 2008 12:00:10
0.48
|
garga  |
No functional changes, just try to make Makefile a bit better:
- Remove conditional to set PORTDOCS
- s/pre-patch/post-patch/
- Change Makefile's reinplace to use ?= instead of comment CC and CFLAGS lines
and remove MAKE_ENV declaration
- Remove redundances of program names, just set it one time and use the vars to
repeat names
Approved by: maintainer by email |
25 Apr 2008 19:04:08
0.48
|
miwi  |
- Respect CC
PR: 122941
Submitted by: Frank Fenor <frank@fenor.de>
Approved by: maintainer |
27 Dec 2007 17:19:23
0.48
|
tabthorpe  |
- Update to 0.48
- Remove pre-everything (no more false positives)
- Remove patches (extra_patches and patch in files directory)
PR: ports/118930
Submitted by: Philippe Audeoud <jadawin tuxaco.net>
Approved by: Luiz Eduardo Roncato Cordeiro <cordeiro nic.br> (maintainer) |
24 Nov 2006 22:58:31
0.47
|
miwi  |
- Update to 0.47
PR: ports/105816
Submitted by: Luiz Eduardo Roncato Cordeiro <cordeiro@cert.br> (maintainer) |
13 May 2006 04:15:53
0.46a
|
edwin  |
Remove USE_REINPLACE from all categories starting with S |
24 Jan 2006 01:03:33
0.46a
|
edwin  |
SHA256ify
Approved by: krion@ |
28 Oct 2005 16:50:11
0.46a
|
garga  |
- Unbreak: Update to 0.46a
Approved by: maintainer |
28 Oct 2005 12:07:36
0.46
|
garga  |
chkproc sends a 25 signal to init causing a reboot after a 30s sleep
Mark it as BROKEN until the problem is fixed.
Submitted by: maintainer (by email) |
27 Oct 2005 14:30:29
0.46
|
garga  |
- Update to 0.46
Approved by: maintainer |
14 Apr 2005 18:42:15
0.45
|
leeym  |
- Update to chkrookit version 0.45 [1]
- utilize PORTDOCS, DOCSDIR and PLIST_FILES
PR: [1] 79865
Submitted by: [1] Luiz Eduardo Roncato Cordeiro <cordeiro@nic.br> |
02 Sep 2004 11:42:23
0.44
|
pav  |
- Update to 0.44
PR: ports/71249
Submitted by: Luiz Eduardo Roncato Cordeiro <cordeiro@nic.br> (maintainer) |
06 Jul 2004 15:27:51
0.43
|
pav  |
- Mark IGNORE for now
PR: ports/68726
Submitted by: Luiz Eduardo Roncato Cordeiro <cordeiro@nic.br> (maintainer) |
31 Mar 2004 03:12:58
0.43
|
trevor  |
SIZEify (maintainer timeout) |
10 Feb 2004 21:35:03
0.43
|
linimon  |
Update to 0.43:
C++ comments removed from chkproc.c. New rootkits detected: AjaKit
and zaRwT. New CGI backdoors detected. ifpromisc.c: better detection
of promisc mode on newer Linux kernels. New command line option
(-n) to skip NFS mounted dirs. Minor bug corrections.
PR: ports/62577
Submitted by: Luiz E. R. Cordeiro <cordeiro@nic.br> (maintainer) |
01 Oct 2003 21:08:48
0.42b
|
krion  |
- Update to version 0.42b
PR: 57477
Submitted by: maintainer |
26 Sep 2003 22:08:33
0.42
|
edwin  |
Update port: security/chkrootkit: upgrade to version 0.42
Version upgrade from 0.41 to 0.42.
It works on FreeBSD 2.2.X, 3.X, 4.X and 5.X.
PR: ports/56757
Submitted by: Luiz Eduardo Roncato Cordeiro <cordeiro@nic.br> |
04 Sep 2003 13:03:05
0.41
|
edwin  |
Teach security/chkrootkit
I finnaly got fed up with that FAQ about chkrootkit. The
solution was either to add a Q+A to the FAQ or fix the port.
This introduce a new variable, FreeBSD5, that is set to
"yes" if we're running FreeBSD 5 or higher.
This variable is used to fix the tests of the following
binaries, so they would DTRT on FreeBSD 5: chfn chsh date
ls ps
I also fixed a bug in the cheking of vdir, but it's irrelevant
for FreeBSD.
Informed maintainer.
PR: ports/55919
Submitted by: Yonatan@xpert.com <Yonatan@xpert.com> |
15 Aug 2003 06:17:17
0.41
|
kris  |
Mark IGNORE on 5.x: chkrootkit reports false positives
Inspired by: Yet another "have I been hacked" email on questions@ |
25 Jun 2003 16:40:08
0.41
|
mich  |
Update to 0.41
PR: 53675
Submitted by: maintainer
Approved by: roberto (mentor) |
09 Apr 2003 08:22:12
0.40
|
kevlo  |
Update to 0.40
PR: 50722
Submitted by: Michael L. Hostbaek <mich@freebsdcluster.org> |
21 Feb 2003 13:26:58
0.39a
|
knu  |
De-pkg-comment. |
02 Feb 2003 13:40:14
0.39a
|
nork  |
Update to 0.39a.
PR: ports/47735
Submitted by: Luiz Eduardo Roncato Cordeiro <cordeiro@luinil.nic.br>
(maintainer) |
11 Jan 2003 03:18:51
0.38
|
pat  |
Update to 0.38
PR: ports/46952
Submitted by: maintainer |
04 Nov 2002 02:15:27
0.37
|
edwin  |
PERL -> REINPLACE
Noticed on: bento |
25 Oct 2002 20:48:02
0.37
|
obraun  |
Upgrade to 0.37.
PR: 44468
Submitted by: maintainer |
18 Jun 2002 23:49:08
0.36
|
pat  |
Update to 0.36
PR: ports/39475
Submitted by: maintainer |
01 Feb 2002 04:06:34 
|
pat  |
Update to 0.35 |
22 Sep 2001 07:44:05 
|
sf  |
update to 0.34. |
11 May 2001 15:34:08 
|
kevlo  |
Update to 0.32 |
27 Apr 2001 13:05:10 
|
ijliao  |
sorry for missing PR and submitter |
27 Apr 2001 13:01:58 
|
ijliao  |
change WWW: to the real site |
17 Apr 2001 13:13:09 
|
roam  |
Update to 0.31, lots of cleanup, add NOPORTDOCS handling. |
17 Apr 2001 06:56:57 
|
will  |
Fix checksum problem on bento by updating to 0.31. Also start using the
versioned distfiles since they are available. |
07 Apr 2001 01:48:49 
|
will  |
Add chkrootkit 0.30, a tool to locally check for signs of a rootkit. |