From eaeeb8f5393df8e3e7c0b01f232cacebd6723afc Mon Sep 17 00:00:00 2001 From: minskim Date: Tue, 17 Feb 2004 15:33:52 +0000 Subject: Import chkrootkit from pkgsrc-wip. Packaged by Adrian Portelli and modified by me. chkrootkit is a tool to locally check for signs of a rootkit. It contains: * chkrootkit: a shell script that checks system binaries for rootkit modification. * ifpromisc.c: checks if the network interface is in promiscuous mode. * chklastlog.c: checks for lastlog deletions. * chkwtmp.c: checks for wtmp deletions. * check_wtmpx.c: checks for wtmpx deletions. (Solaris only) * chkproc.c: checks for signs of LKM trojans. * chkdirs.c: checks for signs of LKM trojans. * strings.c: quick and dirty strings replacement. --- security/chkrootkit/DESCR | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 security/chkrootkit/DESCR (limited to 'security/chkrootkit/DESCR') diff --git a/security/chkrootkit/DESCR b/security/chkrootkit/DESCR new file mode 100644 index 00000000000..b927a834346 --- /dev/null +++ b/security/chkrootkit/DESCR @@ -0,0 +1,13 @@ +chkrootkit is a tool to locally check for signs of a rootkit. It +contains: + + * chkrootkit: a shell script that checks system binaries for + rootkit modification. + * ifpromisc.c: checks if the network interface is in promiscuous + mode. + * chklastlog.c: checks for lastlog deletions. + * chkwtmp.c: checks for wtmp deletions. + * check_wtmpx.c: checks for wtmpx deletions. (Solaris only) + * chkproc.c: checks for signs of LKM trojans. + * chkdirs.c: checks for signs of LKM trojans. + * strings.c: quick and dirty strings replacement. -- cgit v1.2.3