Your message dated Mon, 04 May 2026 11:04:37 +0000
with message-id <[email protected]>
and subject line Bug#1105103: fixed in chkrootkit 0.59-1
has caused the Debian Bug report #1105103,
regarding ifpromisc: output is incomplete
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1105103: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1105103
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
package: chkrootkit
version: 0.58b-4
severity: normal
tags: upstream
ifpromisc (the 'sniffer' test) does not report all 'packet sniffers'
that it detected
A standard desktop with network manager and wifi has 4 processes with
sockets listening on network interfaces, 2 from NetworkManager and 2
from wpa_supplicant, but ifpromisc only detects 3 of them.
This is a combination of
1. only looking at interfaces with ip4 addresses attached (i think it
would miss any ip6-only sockets at the moment, or any sniffers if the
interface happens to be down - i have not tested this), and
2. a logic error in how the output is created: it assumes that by
looping over all visible interfaces will output all the sniffers in
the proc_net_packet linked list. but this is not correct - if a
sniffer has an unusual network index (such as 0 - i assume this means
"listen on all interfaces"?) it will not be output, even though we did
detect it, and have all its details ready to go. This causes it to
provide incomplete output.
So it needs to check that every socket in /proc/net/packet has been
"found" in the process list and if not, output the rest.
I have a patch to fix this, (wont be added until trixie is stable).
--- End Message ---
--- Begin Message ---
Source: chkrootkit
Source-Version: 0.59-1
Done: Richard Lewis <[email protected]>
We believe that the bug you reported is fixed in the latest version of
chkrootkit, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Richard Lewis <[email protected]> (supplier of updated
chkrootkit package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 04 May 2026 00:19:52 +0100
Source: chkrootkit
Architecture: source
Version: 0.59-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Security Tools <[email protected]>
Changed-By: Richard Lewis <[email protected]>
Closes: 1099871 1105103 1115097
Changes:
chkrootkit (0.59-1) unstable; urgency=medium
.
* New upstream version 0.59
- Rebase all patches
+ Fix syntax errors in check for processes running from memory
+ Fix errors in check for busybox
+ Fix bindshell test
+ Fix syntax errors in chk_nologin
+ Fix for recent changes to aliens check
+ Update debian's patch to printn for new upstream version
+ Fix missing filtering of 'suspicious' files in /dev
- Prefer to use ss rather than netstat
- Depend on iproute2 or netstat
- Rename upstream's -s option to --selfcheck avoid a clash with
Debian's -s, which has been used since 2010
* Ensure the systemd timer is killed after a configurable timeout
* ifpromisc: show all detected 'sniffers' (Closes: #1105103),
and sort output (Closes: #1099871)
* Update filtering in debian/chkrootkit.conf and chkrootkit-daily
* Attempt to fix compilation on the HURD (without success)
* autopkgtest: small cleanups
- Update for new upstream version's use of ss
- Update for latest bindshell output
- test chk_nologin
- update for recent changes to aliens check
- replace isc-dhcp (deprecated) with tcpdump (Closes: #1115097)
- work around issue running autopkgtest on salsa.debian.org
- d/tests/control: Make wrap-and-sort happy
- Fix spelling errors in debian/tests/test-chkrootkit
* Misc packaging changes
- postinst: run through shfmt to fix indentation
- chkrootkit-daily: run through shfmt to fix indentation
- convert debian/watch to version 5
- debian/control: Remove Rules-Requires-Root
- 'Priority: optional' no longer needs to be set in debian/control
- Declare 'Standards-Version: 4.7.4' (no changes needed)
- Add debian/upstream/metadata (DEP12)
- Update years in debian/copyright
- Add myself to Uploaders
- Add exim4-daemon-mod to 'Enhances'
* Add NEWS.Debian entry
Checksums-Sha1:
cc6f7621aeea2c83d7d7a00ae1e714b1c3ec0f56 2099 chkrootkit_0.59-1.dsc
2972369c1e959e69d6a9596068e2a2a6f5d1f1e3 45088 chkrootkit_0.59.orig.tar.gz
65682558c20f56fa05460915c8c27db46534d2a1 89808 chkrootkit_0.59-1.debian.tar.xz
554b28e75877a466778fbb585567adc942660a5d 5690 chkrootkit_0.59-1_amd64.buildinfo
Checksums-Sha256:
517b3cc938cd7879207ed25117ce17701c825352660e55f9786f67c5f93406fc 2099
chkrootkit_0.59-1.dsc
bd38f1d7f543a2aa6dd8c7ad6bb88df7c0d7dc101df57377dac24415cbc8c5ee 45088
chkrootkit_0.59.orig.tar.gz
1c856fe1fc976371d54bdfac2ecf06973526554bfa17e4c1995283e120d03964 89808
chkrootkit_0.59-1.debian.tar.xz
4f09189ed752a276df57df04d2b4d43f98bdaa587f1d32d68e003a58e8203f73 5690
chkrootkit_0.59-1_amd64.buildinfo
Files:
33ee8358c72d7407b68d9605a5c9cf2e 2099 misc optional chkrootkit_0.59-1.dsc
0f7412875e5f7e22ee99007700516f3a 45088 misc optional
chkrootkit_0.59.orig.tar.gz
57285abce3d85e2d970fd56643edda28 89808 misc optional
chkrootkit_0.59-1.debian.tar.xz
db5417d29618506fb3d4b02cf8dd6034 5690 misc optional
chkrootkit_0.59-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=SGMN
-----END PGP SIGNATURE-----
pgpgAwUtu5yPB.pgp
Description: PGP signature
--- End Message ---
