Your message dated Fri, 22 Apr 2005 14:47:48 -0400
with message-id <[EMAIL PROTECTED]>
and subject line Bug#286735: fixed in chkrootkit 0.45-1
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 21 Dec 2004 21:35:53 +0000
>From [EMAIL PROTECTED] Tue Dec 21 13:35:53 2004
Return-path: <[EMAIL PROTECTED]>
Received: from mx1.magmacom.com [206.191.0.217]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1Cgrfd-0008Mu-00; Tue, 21 Dec 2004 13:35:53 -0800
Received: from mail3.magma.ca (mail3.magma.ca [206.191.0.221])
by mx1.magmacom.com (8.13.0/8.13.0) with ESMTP id iBLLZpfj031812
for <[EMAIL PROTECTED]>; Tue, 21 Dec 2004 16:35:52 -0500
Received: from pyloric.projectile.ca (ottawa-hs-209-217-79-58.d-ip.magma.ca
[209.217.79.58])
by mail3.magma.ca (8.13.0/8.13.0) with ESMTP id iBLLZopk019082
(version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NOT)
for <[EMAIL PROTECTED]>; Tue, 21 Dec 2004 16:35:51 -0500
Received: from msherman by pyloric.projectile.ca with local (Exim 4.34)
id 1Cgrfa-0005ln-6s; Tue, 21 Dec 2004 16:35:50 -0500
Content-Type: multipart/mixed; boundary="===============1766620955=="
MIME-Version: 1.0
From: Marc Sherman <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: Add filter to daily chkrootkit script
X-Mailer: reportbug 3.2
Date: Tue, 21 Dec 2004 16:35:50 -0500
Message-Id: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level:
This is a multi-part MIME message sent by reportbug.
--===============1766620955==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Package: chkrootkit
Version: 0.44-2
Severity: wishlist
Tags: patch
I've patched the /etc/cron.daily/chkrootkit script to apply an optional
filter, to eliminate known false positives.
This is needed on my machine, for example, due to the fact that I have
port 465 open for SSMTP.
You might also want to add this to the debconf.
-- System Information:
Debian Release: 3.1
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-1-k7
Locale: LANG=en_CA, LC_CTYPE=en_CA (charmap=ISO-8859-1)
Versions of packages chkrootkit depends on:
ii binutils 2.15-5 The GNU assembler, linker and bina
ii debconf 1.4.30.10 Debian configuration management sy
ii libc6 2.3.2.ds1-18 GNU C Library: Shared libraries an
ii net-tools 1.60-10 The NET-3 networking toolkit
-- debconf information:
* chkrootkit/run_daily_opts: -q
* chkrootkit/run_daily: true
--===============1766620955==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="chkrootkit.patch"
--- chkrootkit.orig 2004-12-21 16:27:40.000000000 -0500
+++ chkrootkit 2004-12-21 16:31:18.000000000 -0500
@@ -7,6 +7,10 @@
fi
if [ "$RUN_DAILY" = "true" ]; then
- chkrootkit $RUN_DAILY_OPTS
+ if [ "$RUN_DAILY_FILTER" = "" ]; then
+ chkrootkit $RUN_DAILY_OPTS
+ else
+ chkrootkit $RUN_DAILY_OPTS | egrep -v "$RUN_DAILY_FILTER"
+ fi
fi
--===============1766620955==--
---------------------------------------
Received: (at 286735-close) by bugs.debian.org; 22 Apr 2005 18:50:27 +0000
>From [EMAIL PROTECTED] Fri Apr 22 11:50:27 2005
Return-path: <[EMAIL PROTECTED]>
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DP3ER-00023g-00; Fri, 22 Apr 2005 11:50:27 -0700
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1DP3Bs-0002pB-00; Fri, 22 Apr 2005 14:47:48 -0400
From: lantz moore <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#286735: fixed in chkrootkit 0.45-1
Message-Id: <[EMAIL PROTECTED]>
Sender: Archive Administrator <[EMAIL PROTECTED]>
Date: Fri, 22 Apr 2005 14:47:48 -0400
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
X-CrossAssassin-Score: 4
Source: chkrootkit
Source-Version: 0.45-1
We believe that the bug you reported is fixed in the latest version of
chkrootkit, which is due to be installed in the Debian FTP archive:
chkrootkit_0.45-1.diff.gz
to pool/main/c/chkrootkit/chkrootkit_0.45-1.diff.gz
chkrootkit_0.45-1.dsc
to pool/main/c/chkrootkit/chkrootkit_0.45-1.dsc
chkrootkit_0.45-1_i386.deb
to pool/main/c/chkrootkit/chkrootkit_0.45-1_i386.deb
chkrootkit_0.45.orig.tar.gz
to pool/main/c/chkrootkit/chkrootkit_0.45.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
lantz moore <[EMAIL PROTECTED]> (supplier of updated chkrootkit package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Thu, 21 Apr 2005 17:28:26 -0700
Source: chkrootkit
Binary: chkrootkit
Architecture: source i386
Version: 0.45-1
Distribution: unstable
Urgency: low
Maintainer: lantz moore <[EMAIL PROTECTED]>
Changed-By: lantz moore <[EMAIL PROTECTED]>
Description:
chkrootkit - Checks for signs of rootkits on the local system
Closes: 192438 223428 229673 234566 262586 286041 286057 286473 286735 286870
287062 287109 287755 289647 290690 290816 291494 291754 294775 295889 298394
300217 304561 305708 305710
Changes:
chkrootkit (0.45-1) unstable; urgency=low
.
* New upstream release (closes: 305708, 305710)
* use -f for conf file test (closes: 289647)
* added debconf translations
(closes: 294775,291754,287755,286473,286041)
* added more false positives to README.Debian:
- blackdown java (closes: 286870, 290816)
- blender (closes: 287062)
- mldonkey-server (closes: 304561, 295889)
- twiki (closes: 298394)
- viewglob, kaffe (closes: 287109,286057)
- bitlbee (closes: 234566)
- tiger (closes: 223428)
- radius (closes: 192438,229673)
* only run chkrootkit from cron.daily if the package is still installed
(closes: 300217,291494)
* disabled chkutmp as it seems unstable
* getCMD now only runs test if ps shows the prog as running
(closes: 262586)
* added ability for the daily run to only report problems if they differ
from the previous days run (closes: 290690,286735)
* removed an invalid changelog entry
Files:
31fa5f81899a56ca8a98f2eced5f437e 602 misc optional chkrootkit_0.45-1.dsc
b5b1275dee28023d636daf93e4b6de73 35841 misc optional
chkrootkit_0.45.orig.tar.gz
f42e2030ba1ed8b8171331ccf8892d92 13309 misc optional chkrootkit_0.45-1.diff.gz
280b68a5352ba11fd1a79d5ab017eee2 234064 misc optional
chkrootkit_0.45-1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
iD8DBQFCaE0jNFhjq9qkdRERAi+EAKCJwd+kmTW8yTWu6i+QTwLhcYBKhgCeLP8J
pr5N7d8dtpB+DcHWuQ/WPIY=
=96Ks
-----END PGP SIGNATURE-----
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
