Your message dated Fri, 22 Apr 2005 14:47:48 -0400
with message-id <[EMAIL PROTECTED]>
and subject line Bug#290690: fixed in chkrootkit 0.45-1
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 15 Jan 2005 23:50:31 +0000
>From [EMAIL PROTECTED] Sat Jan 15 15:50:30 2005
Return-path: <[EMAIL PROTECTED]>
Received: from sense-katyking-253.oz.net (burn.ofb.net) [216.39.152.253]
(Debian-exim)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1Cpxgb-0000H4-00; Sat, 15 Jan 2005 15:50:30 -0800
Received: from sethml by burn.ofb.net with local (Exim 4.34)
id 1CpxgY-0000JQ-BO; Sat, 15 Jan 2005 15:50:26 -0800
Content-Type: multipart/mixed; boundary="===============0684710923=="
MIME-Version: 1.0
From: Seth M LaForge <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: Have chkrootkit only mail about changes since previous run
X-Mailer: reportbug 3.5
Date: Sat, 15 Jan 2005 15:50:26 -0800
Message-Id: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
This is a multi-part MIME message sent by reportbug.
--===============0684710923==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Package: chkrootkit
Version: 0.44-2
Severity: wishlist
Tags: patch
chkrootkit gives lots of false warnings, and it gets annoying
receiving an email of false warnings every day. A quick fix is to
make chkrootkit only send mail if its output has changed. Attached is
a patch to do this. (You'll also have to "mkdir /var/lib/chkrootkit"
as root.)
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.4.27-1-686-smp
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Versions of packages chkrootkit depends on:
ii binutils 2.15-5 The GNU assembler, linker and bina
ii debconf 1.4.41 Debian configuration management sy
ii libc6 2.3.2.ds1-19 GNU C Library: Shared libraries an
ii net-tools 1.60-10 The NET-3 networking toolkit
-- debconf information:
* chkrootkit/run_daily: true
* chkrootkit/run_daily_opts: -q
--===============0684710923==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="chkrootkit.patch"
--- /etc/chkrootkit.conf.orig 2005-01-15 15:48:48.000000000 -0800
+++ /etc/chkrootkit.conf 2005-01-15 15:11:53.000000000 -0800
@@ -1,2 +1,3 @@
RUN_DAILY="true"
RUN_DAILY_OPTS="-q"
+SHOW_DIFFS="true"
--- /etc/cron.daily/chkrootkit.orig 2005-01-15 15:48:35.000000000 -0800
+++ /etc/cron.daily/chkrootkit 2005-01-15 15:46:51.000000000 -0800
@@ -8,6 +8,23 @@
fi
if [ "$RUN_DAILY" = "true" ]; then
- chkrootkit $RUN_DAILY_OPTS
+ if [ "$SHOW_DIFFS" = "true" ]; then
+ chkrootkit $RUN_DAILY_OPTS > $LIB/log.new
+ if [ -f $LIB/log ]; then
+ if diff -u $LIB/log $LIB/log.new; then
+ :
+ else
+ echo
+ echo
+ echo Full chkrootkit output:
+ cat $LIB/log.new
+ fi
+ else
+ cat $LIB/log.new
+ fi
+ mv $LIB/log.new $LIB/log
+ else
+ chkrootkit $RUN_DAILY_OPTS
+ fi
fi
--===============0684710923==--
---------------------------------------
Received: (at 290690-close) by bugs.debian.org; 22 Apr 2005 18:50:26 +0000
>From [EMAIL PROTECTED] Fri Apr 22 11:50:25 2005
Return-path: <[EMAIL PROTECTED]>
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DP3EP-00022G-00; Fri, 22 Apr 2005 11:50:25 -0700
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1DP3Bs-0002pN-00; Fri, 22 Apr 2005 14:47:48 -0400
From: lantz moore <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#290690: fixed in chkrootkit 0.45-1
Message-Id: <[EMAIL PROTECTED]>
Sender: Archive Administrator <[EMAIL PROTECTED]>
Date: Fri, 22 Apr 2005 14:47:48 -0400
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
X-CrossAssassin-Score: 6
Source: chkrootkit
Source-Version: 0.45-1
We believe that the bug you reported is fixed in the latest version of
chkrootkit, which is due to be installed in the Debian FTP archive:
chkrootkit_0.45-1.diff.gz
to pool/main/c/chkrootkit/chkrootkit_0.45-1.diff.gz
chkrootkit_0.45-1.dsc
to pool/main/c/chkrootkit/chkrootkit_0.45-1.dsc
chkrootkit_0.45-1_i386.deb
to pool/main/c/chkrootkit/chkrootkit_0.45-1_i386.deb
chkrootkit_0.45.orig.tar.gz
to pool/main/c/chkrootkit/chkrootkit_0.45.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
lantz moore <[EMAIL PROTECTED]> (supplier of updated chkrootkit package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Thu, 21 Apr 2005 17:28:26 -0700
Source: chkrootkit
Binary: chkrootkit
Architecture: source i386
Version: 0.45-1
Distribution: unstable
Urgency: low
Maintainer: lantz moore <[EMAIL PROTECTED]>
Changed-By: lantz moore <[EMAIL PROTECTED]>
Description:
chkrootkit - Checks for signs of rootkits on the local system
Closes: 192438 223428 229673 234566 262586 286041 286057 286473 286735 286870
287062 287109 287755 289647 290690 290816 291494 291754 294775 295889 298394
300217 304561 305708 305710
Changes:
chkrootkit (0.45-1) unstable; urgency=low
.
* New upstream release (closes: 305708, 305710)
* use -f for conf file test (closes: 289647)
* added debconf translations
(closes: 294775,291754,287755,286473,286041)
* added more false positives to README.Debian:
- blackdown java (closes: 286870, 290816)
- blender (closes: 287062)
- mldonkey-server (closes: 304561, 295889)
- twiki (closes: 298394)
- viewglob, kaffe (closes: 287109,286057)
- bitlbee (closes: 234566)
- tiger (closes: 223428)
- radius (closes: 192438,229673)
* only run chkrootkit from cron.daily if the package is still installed
(closes: 300217,291494)
* disabled chkutmp as it seems unstable
* getCMD now only runs test if ps shows the prog as running
(closes: 262586)
* added ability for the daily run to only report problems if they differ
from the previous days run (closes: 290690,286735)
* removed an invalid changelog entry
Files:
31fa5f81899a56ca8a98f2eced5f437e 602 misc optional chkrootkit_0.45-1.dsc
b5b1275dee28023d636daf93e4b6de73 35841 misc optional
chkrootkit_0.45.orig.tar.gz
f42e2030ba1ed8b8171331ccf8892d92 13309 misc optional chkrootkit_0.45-1.diff.gz
280b68a5352ba11fd1a79d5ab017eee2 234064 misc optional
chkrootkit_0.45-1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
iD8DBQFCaE0jNFhjq9qkdRERAi+EAKCJwd+kmTW8yTWu6i+QTwLhcYBKhgCeLP8J
pr5N7d8dtpB+DcHWuQ/WPIY=
=96Ks
-----END PGP SIGNATURE-----
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
