Hello community,
here is the log from the commit of package rkhunter for openSUSE:Factory
checked in at Thu Aug 11 11:31:24 CEST 2011.
--------
New Changes file:
--- /dev/null 2010-08-26 16:28:41.000000000 +0200
+++ /mounts/work_src_done/STABLE/rkhunter/rkhunter.changes 2011-08-04 16:29:35.000000000 +0200
@@ -0,0 +1,194 @@
+-------------------------------------------------------------------
+Thu Aug 4 14:28:31 UTC 2011 - Sascha.Manns@open-slx.de
+
+- fixed License to GPLv2 or later
+ has misunderstood a message
+
+-------------------------------------------------------------------
+Tue May 24 11:30:58 UTC 2011 - saigkill@opensuse.org
+
+- fixed bnc#695317 based on Volker Kuhlmann THX
+
+-------------------------------------------------------------------
+Wed Nov 17 13:56:58 UTC 2010 - saigkill@opensuse.org
+
+- Updated to version 1.3.8
+
+-------------------------------------------------------------------
+Mon Nov 30 16:44:30 UTC 2009 - saigkill@opensuse.org
+
+- updated to Version 1.3.6
+
+-------------------------------------------------------------------
+Mon Nov 30 16:42:06 UTC 2009 - saigkill@opensuse.org
+
+- cleanup :
+
+-------------------------------------------------------------------
+Sat Jan 10 18:46:00 UTC 2009 - saigkill@opensuse.org - 1.3.4
+
+- branched for OpenSUSE:Factory:contrib
+- changed License to GPLv3
+- changed Sourcecode from *.tar.gz to tar.bz2
+
+-------------------------------------------------------------------
+Wed Dec 31 00:00:00 CET 2008 - lrupp@suse.de - 1.3.4
+
+- update to 1.3.4
+ + The change log lists 4 additions, 8 changes and 9 bugfixes. Here are a few:
+ + Added IntoXonia-NG rootkit check.
+ + Added Phalanx2 rootkit check.
+ + Added support for TCB shadow files.
+ + The '--propupd' option can now take an optional file,
+ directory or package name after it.
+ + Revised file properties inode check.
+ + Improved the O/S name detection.
+ + Improved hidden files and directories check.
+ + Improved debug file option.
+
+-------------------------------------------------------------------
+Fri Nov 14 12:29:36 CET 2008 - lrupp@suse.de - 1.3.2
+
+- added rkhunter-1.3.2-CVE-2008-4982.patch
+
+-------------------------------------------------------------------
+Tue Nov 4 10:31:05 CET 2008 - lars@linux-schulserver.de - 1.3.2
+
+- added --no-mail-on-warning as option to the sysconfig and cronjob
+ to avoid double mails
+
+-------------------------------------------------------------------
+Mon Jun 30 15:01:42 CEST 2008 - lrupp@suse.de - 1.3.2
+
+- added /dev/shm/pulse-shm to allowed dev files
+
+-------------------------------------------------------------------
+Mon May 26 15:09:19 CEST 2008 - lrupp@suse.de - 1.3.2
+
+- allow users to disable SuSEconfig script via sysconfig file
+
+-------------------------------------------------------------------
+Thu May 8 13:24:38 CEST 2008 - lrupp@suse.de - 1.3.2
+
+- remove the --propupd option from cron: makes more problems than
+ it solves
+- add SuSEconfig.rkhunter instead if build in OBS
+- update README.SuSE
+
+-------------------------------------------------------------------
+Tue May 6 12:31:43 CEST 2008 - lrupp@suse.de - 1.3.2
+
+- fix typo in cronjob (bnc#384668)
+- logrotate script is %config
+
+-------------------------------------------------------------------
+Mon Apr 28 18:10:37 CEST 2008 - lrupp@suse.de - 1.3.2
+
+- allow /dev/shm/sysconfig/new-stamp-* files
+
+-------------------------------------------------------------------
+Tue Apr 8 12:12:50 CEST 2008 - lrupp@suse.de - 1.3.2
+
+- fix typo in sysconfig file
+
+-------------------------------------------------------------------
+Thu Apr 3 19:41:37 CEST 2008 - lrupp@suse.de - 1.3.2
+
+- update to 1.3.2:
+ The changelog lists 3 additions, 6 changes and 14 bugfixes.
+ Naming a few:
+ + Socklog and rsyslog daemons support.
+ + Application version check errors mostly ignored.
+ + Unset ALLOW_SSH_ROOT_USER and ALLOW_SSH_PROT_V1.
+ + Application check whitelisting.
+ + Correct scanning of /dev in LAZY mode.
+ + Whitelisted passwordless account names logged.
+ + Corrected obtaining process names in Solaris.
+ + Correct hidden files/directories test behaviour.
+ + Cater for those using fdesc/fdescfs.
+
+-------------------------------------------------------------------
+Wed Feb 6 13:51:10 CET 2008 - lrupp@suse.de - 1.3.0
+
+- update to 1.3.0:
+ - many new features
+ (needs testing)
+
+-------------------------------------------------------------------
+Wed Nov 28 17:17:47 CET 2007 - lrupp@suse.de - 1.2.9
+
+- newdb.tar.bz2 updated
+- rkhunter-10.3.patch adapted
+
+-------------------------------------------------------------------
+Fri Jun 01 17:31:19 CET 2007 - lrupp@suse.de - 1.2.9
+
+- update to 1.29
+- improved the cronjob
+- added sysconfig file for cronjob
+- add /var/log/rkhunter.log as %ghost
+- add hashupd.sh to scripts directory
+
+-------------------------------------------------------------------
+Wed Nov 22 19:58:18 CET 2006 - meissner@suse.de - 1.2.8
+
+- use correct string for i586. #223221
+
+-------------------------------------------------------------------
+Thu Nov 16 11:37:13 CET 2006 - meissner@suse.de - 1.2.8
+
+- Detect openSUSE as product correctly. #216053
+- renamed cron script to have "suse.de-" prefix.
+
+-------------------------------------------------------------------
+Tue Nov 7 16:51:10 CET 2006 - meissner@suse.de - 1.2.8
+
+- Include the current database from upstream. #216053
+- daily cron script to mode 755
+
+-------------------------------------------------------------------
+Wed Jul 19 14:44:03 CEST 2006 - meissner@suse.de - 1.2.8
+
+- New version 1.2.8
+ - some hashes and version updated
+ - small fixes
+- Added SUSE Linux 10 hashes
+
+-------------------------------------------------------------------
+Thu Mar 23 14:12:10 CET 2006 - meissner@suse.de - 1.2.7
+
+- detect 10.1. #148471
+
+-------------------------------------------------------------------
+Wed Jan 25 21:47:41 CET 2006 - mls@suse.de - 1.2.7
+
+- converted neededforbuild to BuildRequires
+
+-------------------------------------------------------------------
+Thu Dec 1 17:42:00 CET 2005 - meissner@suse.de - 1.2.7
+
+- Order ALLOW* directives in the right section.
+- Do not |mail in a cronjob, just let cron do it for itself.
+- Quiet down output so it usually should not mail.
+- Enable MAIL_ON_WARNING, send mail to root. #132683
+
+-------------------------------------------------------------------
+Wed Sep 7 10:40:53 CEST 2005 - meissner@suse.de - 1.2.7
+
+- ignore /etc/.pwd.lock, /etc/.java too. #115128
+
+-------------------------------------------------------------------
+Thu Aug 18 17:06:56 CEST 2005 - meissner@suse.de - 1.2.7
+
+- recognize 10.0, ignore /dev/.udevdb/.
+
+-------------------------------------------------------------------
+Fri Aug 12 14:08:55 CEST 2005 - meissner@suse.de - 1.2.7
+
+- Use /usr/share/rkhunter instead of /usr/%_lib/rkhunter.
+- Fixed some other problems.
+
+-------------------------------------------------------------------
+Mon Jul 11 18:16:41 CEST 2005 - meissner@suse.de - 1.2.7
+
+- Initial import of rkhunter 1.2.7
calling whatdependson for head-i586
New:
----
rkhunter-1.3.8.tar.bz2
rkhunter-README.SuSE
rkhunter-installer-fix.patch
rkhunter.changes
rkhunter.cron
rkhunter.logrotate
rkhunter.spec
rkhunter.sysconfig
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ rkhunter.spec ++++++
#
# spec file for package rkhunter
#
# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany.
# Copyright (c) 2009-2010 by Sascha Manns
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via http://bugs.opensuse.org/
#
Name: rkhunter
Version: 1.3.8
Release: 1
License: GPL v2 or later
Summary: Rootkit Hunter Scans for Rootkits, Backdoors, and Local Exploits
Url: http://rkhunter.sourceforge.net/
Group: System/Monitoring
Source0: %{name}-%{version}.tar.bz2
Source2: %{name}.sysconfig
Source3: %{name}.cron
Source5: %{name}-README.SuSE
Source6: %{name}.logrotate
# PATCH-FIX-OPENSUSE -- saigkill@opensuse.org - Fix Pathes2
Patch0: %{name}-installer-fix.patch
BuildRequires: wget
PreReq: %fillup_prereq
Requires: bash
Requires: cron
Requires: findutils
Recommends: logrotate
Recommends: netcfg
Recommends: wget
BuildRoot: %{_tmppath}/%{name}-%{version}-build
AutoReqProv: no
%description
Rootkit Hunter scans files and systems for known and unknown rootkits,
backdoors, and sniffers. The package contains one shell script, a few
text-based databases, and optional Perl modules. This tool scans for
rootkits, backdoors, and local exploits by running tests like:
* Comparing MD5 hashes
* Looking for default files used by rootkits
* Checking for wrong file permissions for binaries
* Looking for suspected strings in LKM and KLD modules
* Looking for hidden files
* Optionally scanning within plain text and binary files
* Checking software versions
* Testing applications
%prep
%setup -q
%patch0 -p0
%build
sed -e 's/\${MYDIR}\/lib/\%{_prefix}\/share/;' files/rkhunter >files/rkhunter.new
mv files/rkhunter.new files/rkhunter
%install
sh ./installer.sh --layout RPM --install
%{__install} -D -m640 %{SOURCE2} %{buildroot}%{_localstatedir}/adm/fillup-templates/sysconfig.%{name}
%{__install} -d %{buildroot}%{_docdir}/%{name}-%{version}
%{__install} -m644 %{SOURCE5} %{buildroot}%{_docdir}/%{name}-%{version}/README.SuSE
%{__install} -D -m640 %{SOURCE6} %{buildroot}%{_sysconfdir}/logrotate.d/%{name}
# Make a cron.daily file to mail us the reports
%{__install} -d %{buildroot}%{_sysconfdir}/cron.daily/
%{__install} -Dm750 %{SOURCE3} %{buildroot}%{_sysconfdir}/cron.daily/suse.de-%{name}
# adapt the default config for using in openSUSE
sed "s|^PREFIX*|PREFIX="%{_prefix}"|g; \
s|^#SCRIPTDIR.*|SCRIPTDIR=%{_prefix}/lib/%{name}/scripts|g; \
s|^#TMPDIR.*|TMPDIR=%{_var}/lib/rkhunter/tmp|g; \
s|^#DBDIR.*|DBDIR=%{_var}/lib/rkhunter/db|g; \
s|^APPEND_LOG=0|APPEND_LOG=1|g; \
s|ALLOW_SSH_ROOT_USER=no|ALLOW_SSH_ROOT_USER=yes|g; \
s|^#PKGMGR.*|PKGMGR=RPM|g; \
s|^#ALLOWHIDDENDIR=%{_sysconfdir}/.java.*|ALLOWHIDDENDIR=%{_sysconfdir}/.java|g; \
s|^#ALLOWHIDDENDIR=/dev/.udev.*|ALLOWHIDDENDIR=/dev/.udev|g; \
s|^#ALLOWHIDDENFILE=%{_sysconfdir}/.pwd.lock.*|ALLOWHIDDENFILE=%{_sysconfdir}/.pwd.lock|g; \
s|^#ALLOWDEVFILE=/dev/shm/pulse-shm-.*|ALLOWDEVFILE=/dev/shm/sysconfig/new-stamp-\*|g" \
%{buildroot}%{_sysconfdir}/%{name}.conf > %{buildroot}%{_sysconfdir}/%{name}.conf.new
mv %{buildroot}%{_sysconfdir}/%{name}.conf.new %{buildroot}%{_sysconfdir}/%{name}.conf
for i in ifup-lo if-lo network config-lo new-stamp-2; do
echo "ALLOWDEVFILE=/dev/shm/sysconfig/$i" >> %{buildroot}%{_sysconfdir}/%{name}.conf
done
for i in $(seq 0 9); do
echo "ALLOWDEVFILE=/dev/shm/sysconfig/ifup-eth$i" >> %{buildroot}%{_sysconfdir}/%{name}.conf
echo "ALLOWDEVFILE=/dev/shm/sysconfig/if-eth$i" >> %{buildroot}%{_sysconfdir}/%{name}.conf
echo "ALLOWDEVFILE=/dev/shm/sysconfig/config-eth$i" >> %{buildroot}%{_sysconfdir}/%{name}.conf
done
echo "ALLOWDEVFILE=/dev/shm/pulse-shm-*" >> %{buildroot}%{_sysconfdir}/%{name}.conf
# install ghost file
mkdir -p %{buildroot}%{_localstatedir}/log
touch %{buildroot}%{_localstatedir}/log/%{name}.log
# strip %#{_libdir}/%{name}/%{name}/plugins/*.so
%clean
[ %{buildroot} != "/" ] && [ -d %{buildroot} ] \
&& rm -rf %{buildroot}
%post
%{fillup_only}
%files
%defattr(644,root,root,755)
%doc %{_mandir}/man8/%{name}.8*
%doc %{_docdir}/%{name}-%{version}/ACKNOWLEDGMENTS
%doc %{_docdir}/%{name}-%{version}/CHANGELOG
%doc %{_docdir}/%{name}-%{version}/FAQ
%doc %{_docdir}/%{name}-%{version}/LICENSE
%doc %{_docdir}/%{name}-%{version}/README
%doc %{_docdir}/%{name}-%{version}/README.SuSE
%doc %{_docdir}/%{name}-%{version}
%dir %{_libdir}/%{name}
%dir %{_libdir}/%{name}/scripts
%dir %{_var}/lib/%{name}
%dir %{_var}/lib/%{name}/db
%dir %{_var}/lib/%{name}/db/i18n
%dir %{_var}/lib/%{name}/tmp
%defattr(640,root,root,-)
%config(noreplace) %{_sysconfdir}/%{name}.conf
%verify(not md5 size mtime) %{_var}/lib/%{name}/db/*.dat
%{_var}/lib/%{name}/db/i18n/*
%config(noreplace) %{_sysconfdir}/logrotate.d/rkhunter
%{_localstatedir}/adm/fillup-templates/sysconfig.%{name}
%ghost %verify(not md5 size mtime) %config(noreplace)%{_localstatedir}/log/%{name}.log
%defattr(750,root,root,-)
%{_bindir}/%{name}
%{_sysconfdir}/cron.daily/suse.de-%{name}
%{_libdir}/%{name}/scripts/*.pl
%{_libdir}/%{name}/scripts/*.sh
%changelog
++++++ rkhunter-README.SuSE ++++++
RKHUNTER FAQ
The new Rootkit Hunter FAQ is located at:
http://sourceforge.net/docman/display_doc.php?docid=35179&group_id=155034
DATABASE UPDATES
To be able to run automatic database update, you will need to install wget
and set the DB_UPDATE variable to "yes".
++++++ rkhunter-installer-fix.patch ++++++
Index: installer.sh
===================================================================
--- installer.sh.orig
+++ installer.sh
@@ -129,7 +129,7 @@ selectTemplate() { # Take input from the
/usr|/usr/local|default|custom_*|RPM|DEB|TGZ)
case "$1" in
default)
- PREFIX="/usr/local"
+ PREFIX="/usr"
;;
custom_*)
PREFIX=`echo "${RKHINST_LAYOUT}" | sed 's|custom_||g'`
@@ -163,9 +163,9 @@ selectTemplate() { # Take input from the
if [ -n "${RPM_BUILD_ROOT}" ]; then
if [ "${RPM_BUILD_ROOT}" = "/" ]; then
RPM_USING_ROOT=1
- PREFIX="/usr/local"
+ PREFIX="/usr"
else
- PREFIX="${RPM_BUILD_ROOT}/usr/local"
+ PREFIX="${RPM_BUILD_ROOT}/usr"
fi
else
echo "RPM installation chosen but \$RPM_BUILD_ROOT variable not found. Exiting."
@@ -218,7 +218,7 @@ selectTemplate() { # Take input from the
esac
case "$1" in
- /usr/local|custom_*)
+ /usr|custom_*)
SYSCONFIGDIR="${PREFIX}/etc"
;;
RPM)
@@ -366,7 +366,7 @@ selectTemplate() { # Take input from the
else
RKHINST_DB_DIR="${VARDIR}/lib/${APPNAME}/db"
RKHINST_TMP_DIR="${VARDIR}/lib/${APPNAME}/tmp"
- RKHINST_DOC_DIR="${SHAREDIR}/doc/${APPNAME}-${APPVERSION}"
+ RKHINST_DOC_DIR="${SHAREDIR}/doc/packages/${APPNAME}-${APPVERSION}"
fi
RKHINST_MAN_DIR="${SHAREDIR}/man/man8"
++++++ rkhunter.cron ++++++
#!/bin/sh
#
# cronscript for rkhunter
# Author: Lars Vogdt
# This script is GPL v.2 and free to use.
# See LICENSE file for use of this software.
#
# $Id$
#
PATH=/bin:/usr/bin:/usr/lib/rkhunter/scripts
RKHUNTER=/usr/bin/rkhunter
DISTCONFIG="/etc/sysconfig/rkhunter"
##################################################
# Default/Fallback values
# Don't change them here! Use $DISKCONFIG instead
##################################################
START_RKHUNTER="yes"
CRON_DB_UPDATE="no"
NICE="0"
LOGFILE="/var/log/rkhunter.log"
REPORT_EMAIL="root"
OPTIONS="--no-mail-on-warning --cronjob --report-warnings-only --append-log --pkgmgr RPM"
##################################################
if [ ! -x $RKHUNTER ]; then
echo "$RKHUNTER not found or not executable" >&2
exit 1
fi
# source our config
if [ -f $DISTCONFIG ]; then
. $DISTCONFIG
else
echo "$DISTCONFIG not found - using defaults" >&2
fi
# use fqdn in summary, to make it easier
# to distinguish between different hosts
if [ -f /etc/HOSTNAME ]; then
NAME=$(cat /etc/HOSTNAME)
SUMMARY="Subject: [rkhunter] Warnings for $NAME"
else
SUMMARY="Subject: [rkhunter] Warnings"
fi
case "$START_RKHUNTER" in
[Yy]*)
OUTFILE=`mktemp /var/tmp/rkhunter-cron.XXXXXX` || exit 1
# first update the database
if [ x"$CRON_DB_UPDATE" = x"yes" ]; then
# wget is recommended - so we can't be shure that it exists
if [ ! -x /usr/bin/wget ]; then
echo "/usr/bin/wget not found or not executable" >&2
echo "Database update disabled"
break;
fi
$RKHUNTER --versioncheck 1>/dev/null 2>>$OUTFILE
$RKHUNTER --update 1>/dev/null 2>>$OUTFILE
fi
nice -n $NICE $RKHUNTER $OPTIONS --createlogfile $LOGFILE >> $OUTFILE
if [ $(stat -c %s $OUTFILE) -ne 0 ]; then
(
echo "$SUMMARY"
echo ""
cat $OUTFILE
) | /usr/sbin/sendmail $REPORT_EMAIL
fi
rm -f $OUTFILE
;;
*)
exit 0
;;
esac
++++++ rkhunter.logrotate ++++++
/var/log/rkhunter.log {
weekly
missingok
rotate 4
compress
delaycompress
notifempty
create 640 root root
}
++++++ rkhunter.sysconfig ++++++
## Path: System/Security/rkhunter
## Type: yesno
## Default: yes
#
# The START_RKHUNTER variable controls whether the rkhunter
# check scripts should be run automatically every night.
# Set to "no" to disable
#
START_RKHUNTER="yes"
## Type: yesno
## Default: yes
#
# Run SuSEconfig script via YaST?
# If you install software via YaST, the SuSEconfig script will
# update your rkhunter database afterwards automatically.
# You should run 'rkhunter --propupd' manually if you disable
# this value.
#
RUN_SUSECONFIG="yes"
## Type: yesno
## Default: no
#
# Update the databases of rkhunter via cronjob once a day.
# This is only done if the START_RKHUNTER variable is enabled.
# Needs internet access.
#
CRON_DB_UPDATE="no"
## Type: yesno
## Default: no
#
# Update the file properties database.
# One of the checks rkhunter performs is to compare various current
# file properties of various commands, against those it has previously
# stored.
# This command option causes rkhunter to update its data file of stored
# values with the current values.
# If you've installed or updated new software, this tag should be set
# to "yes" - but don't forget to disable it afterwards!
#
PRO_UPDATE="no"
## Type: integer(-20:19)
## Default: 0
#
# Renice the rkhunter process when running as cronjob.
# Possible values: -20 up to 19
#
NICE="0"
## Type: string
## Default: "/var/log/rkhunter.log"
#
# Path to the logfile for rkhunter messages.
# Leave it empty means: create no logfile.
#
# Be shure that rkhunter can write to this log.
#
LOGFILE="/var/log/rkhunter.log"
## Type: string
## Default: "root"
#
# Send report mails to the following account.
# Use a system account or a valid email-address
# here.
#
REPORT_EMAIL="root"
## Type: string
## Default: "--cronjob --report-warnings-only --append-log --pkgmgr RPM"
#
# Additional options (see rkhunter --help) for rkhunter.
#
OPTIONS="--no-mail-on-warning --cronjob --report-warnings-only --append-log --pkgmgr RPM"
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Remember to have fun...
--
To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-commit+help@opensuse.org