head	1.12;
access;
symbols
	RELEASE_8_3_0:1.12
	RELEASE_9_0_0:1.12
	RELEASE_7_4_0:1.12
	RELEASE_8_2_0:1.12
	RELEASE_6_EOL:1.12
	RELEASE_8_1_0:1.12
	RELEASE_7_3_0:1.12
	RELEASE_8_0_0:1.12
	RELEASE_7_2_0:1.12
	RELEASE_7_1_0:1.12
	RELEASE_6_4_0:1.12
	RELEASE_5_EOL:1.12
	RELEASE_7_0_0:1.12
	RELEASE_6_3_0:1.12
	PRE_XORG_7:1.12
	RELEASE_4_EOL:1.12
	RELEASE_6_2_0:1.12
	RELEASE_6_1_0:1.12
	RELEASE_5_5_0:1.12
	RELEASE_6_0_0:1.12
	RELEASE_5_4_0:1.11
	RELEASE_4_11_0:1.11
	RELEASE_5_3_0:1.11
	RELEASE_4_10_0:1.11
	RELEASE_5_2_1:1.11
	RELEASE_5_2_0:1.11
	RELEASE_4_9_0:1.11
	RELEASE_5_1_0:1.10
	RELEASE_4_8_0:1.10
	RELEASE_5_0_0:1.8
	RELEASE_4_7_0:1.7
	RELEASE_4_6_2:1.6
	RELEASE_4_6_1:1.6
	RELEASE_4_6_0:1.6
	RELEASE_5_0_DP1:1.6
	RELEASE_4_5_0:1.5
	RELEASE_4_4_0:1.4
	RELEASE_4_3_0:1.1;
locks; strict;
comment	@# @;


1.12
date	2005.04.14.18.42.15;	author leeym;	state Exp;
branches;
next	1.11;

1.11
date	2003.06.25.16.40.08;	author mich;	state Exp;
branches;
next	1.10;

1.10
date	2003.02.02.13.40.13;	author nork;	state Exp;
branches;
next	1.9;

1.9
date	2003.01.11.03.18.51;	author pat;	state Exp;
branches;
next	1.8;

1.8
date	2002.10.25.20.48.02;	author obraun;	state Exp;
branches;
next	1.7;

1.7
date	2002.06.18.23.49.07;	author pat;	state Exp;
branches;
next	1.6;

1.6
date	2002.02.01.04.06.34;	author pat;	state Exp;
branches;
next	1.5;

1.5
date	2001.09.22.06.44.04;	author sf;	state Exp;
branches;
next	1.4;

1.4
date	2001.05.11.14.34.07;	author kevlo;	state Exp;
branches;
next	1.3;

1.3
date	2001.04.27.12.05.09;	author ijliao;	state Exp;
branches;
next	1.2;

1.2
date	2001.04.27.12.01.58;	author ijliao;	state Exp;
branches;
next	1.1;

1.1
date	2001.04.07.00.48.49;	author will;	state Exp;
branches;
next	;


desc
@@


1.12
log
@- Update to chkrookit version 0.45 [1]
- utilize PORTDOCS, DOCSDIR and PLIST_FILES

PR:		[1] 79865
Submitted by:	[1] Luiz Eduardo Roncato Cordeiro <cordeiro@@nic.br>
@
text
@ Chkrootkit is a tool to locally check for signs of a rootkit.
 -------------------------------------------------------------

 It contains:

 * chkrootkit: a shell script that checks system binaries for
   rootkit modification.
 * ifpromisc.c: checks if the network interface is in promiscuous
   mode.
 * chklastlog.c: checks for lastlog deletions.
 * chkwtmp.c: checks for wtmp deletions.
 * check_wtmpx.c: checks for wtmpx deletions.  (Solaris only)
 * chkproc.c: checks for signs of LKM trojans.
 * chkdirs.c: checks for signs of LKM trojans.
 * strings.c: quick and dirty strings replacement.
 * chkutmp.c: checks for utmp deletions.

 For an updated list of rootkits, worms and LKMs detected by
 chkrootkit please visit: http://www.chkrootkit.org/

Nelson Murilo <nelson@@pangeia.com.br>
Klaus Steding-Jessen <jessen@@nic.br>

WWW: http://www.chkrootkit.org/
@


1.11
log
@Update to 0.41

PR:		53675
Submitted by:	maintainer
Approved by:	roberto (mentor)
@
text
@d16 1
@


1.10
log
@Update to 0.39a.

PR:		ports/47735
Submitted by:	Luiz Eduardo Roncato Cordeiro <cordeiro@@luinil.nic.br>
		(maintainer)
@
text
@d4 1
a4 12
 Rootkits, Worms and LKMs detected
 ---------------------------------
 The following rootkits, worms and LKMs are currently detected:
 Solaris rootkit, FreeBSD rootkit, lrk3, lrk4, lrk5, lrk6, t0rn (and
 t0rn v8), some lrk variants, Ambient's Rootkit for Linux (ARK), Ramen
 Worm, rh[67]-shaper, RSHA, Romanian rootkit, RK17, Lion Worm, Adore
 Worm, LPD Worm, kenny-rk, Adore LKM, ShitC Worm, Omega Worm, Wormkit
 Worm, dsc-rootkit, RST.b, duarawkz, knark LKM, Monkit, Hidrootkit,
 Bobkit, Pizdakit, t0rn (v8.0 variant), Showtee, Optickit, T.R.K,
 MithRa's Rootkit, George, SucKIT, Scalper Worm, Slapper Worm (and
 variants), OpenBSD rk v1, Illogic, SK rootkit, sebek LKM, Romanian
 rootkit and LOC rootkit.
d6 13
@


1.9
log
@Update to 0.38

PR:		ports/46952
Submitted by:	maintainer
@
text
@d13 4
a16 3
 MithRa's Rootkit, George, SucKIT, Scalper Worm, Slapper Worm, OpenBSD
 rk v1, Illogic, SK rootkit, sebek LKM, Romanian rootkit and LOC
 rootkit.
@


1.8
log
@Upgrade to 0.37.

PR:		44468
Submitted by:	maintainer
@
text
@a5 1

d13 3
a15 2
 MithRa's Rootkit, George, SucKIT Scalper Worm, Slapper Worm, OpenBSD
 rk v1, Illogic and SK rootkit.
d18 1
@


1.7
log
@Update to 0.36

PR:		ports/39475
Submitted by:	maintainer
@
text
@d14 2
a15 2
 MithRa's Rootkit, George and SucKIT.

@


1.6
log
@Update to 0.35

PR:		34485
Submitted by:	maintainer
@
text
@d13 3
a15 1
 Bobkit, Pizdakit, t0rn (v8.0 variant).
@


1.5
log
@update to 0.34.

PR:		30709
Submitted by:	maintainer
@
text
@d1 5
a5 16
Chkrootkit is a tool to locally check for signs of a rootkit.  It
contains:
 
 * chkrootkit: a shell script that checks system binaries for
   rootkit modification.
 
 * ifpromisc.c: checks if the network interface is in promiscuous
   mode.
 
 * chklastlog.c: checks for lastlog deletions.
 
 * chkwtmp.c: checks for wtmp deletions.
 
 * check_wtmpx.c: checks for wtmpx deletions.  (Solaris only)
 
 * chkproc.c: checks for signs of LKM trojans.
d12 3
a14 2
 Worm, dsc-rootkit.
 
@


1.4
log
@Update to 0.32

PR: 27257
Submitted by: MAINTAINER
@
text
@d6 1
d9 1
d11 1
d13 4
d22 2
a23 1
 Worm, LPD Worm, kenny-rk and Adore LKM.
@


1.3
log
@sorry for missing PR and submitter

PR:		26819
Submitted by:	MAINTAINER
@
text
@d10 6
a15 5
 
The following rootkits and worms are currently detected: Solaris
rootkit, FreeBSD rootkit, lrk3, lrk4, lrk5, lrk6, t0rn, some lrk
variants, Ambient's Rootkit for Linux (ARK), Ramen Worm,
rh[67]-shaper, RSHA and Romanian rootkit.
@


1.2
log
@change WWW: to the real site
@
text
@@


1.1
log
@Add chkrootkit 0.30, a tool to locally check for signs of a rootkit.

PR:		26115
Submitted by:	Luiz Eduardo R. Cordeiro
@
text
@d18 1
a18 1
WWW: http://www.chkrootkit.org.br
@

