Your message dated Sat, 30 Sep 2006 15:47:14 -0700 with message-id <[EMAIL PROTECTED]> and subject line Bug#365715: fixed in chkrootkit 0.46a-4 has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database)
--- Begin Message ---Package: chkrootkit Version: 0.46a-3 Severity: normal Hi! chkrootkit does some tests but ignores the result. Example: ====================================================================== ### China Worm (Sadmind/IIS Worm) if [ "${QUIET}" != "t" ];then printn "Searching for Sadmind/IIS Worm... "; fi files=`${find} ${ROOTDIR}dev/cuc > /dev/null 2>&1` if [ "${files}" = "" ]; then if [ "${QUIET}" != "t" ]; then echo "nothing found"; fi else echo "${files}" fi ====================================================================== Here all find output is sent to /dev/null, and $files is always empty. I found this error in the following tests: China Worm (Sadmind/IIS Worm) MonKit OpticKit Mithra's Rootkit Thanks, Jö. -- System Information: Debian Release: testing/unstable APT prefers proposed-updates APT policy: (500, 'proposed-updates'), (500, 'testing'), (500, 'stable'), (1, 'unstable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.16-1-k7 Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=UTF-8) Versions of packages chkrootkit depends on: ii binutils 2.16.1cvs20060413-1 The GNU assembler, linker and bina ii debconf [debconf-2.0 1.4.72 Debian configuration management sy ii libc6 2.3.6-7 GNU C Library: Shared libraries ii net-tools 1.60-17 The NET-3 networking toolkit ii procps 1:3.2.6-2.1 /proc file system utilities chkrootkit recommends no packages. -- debconf information: * chkrootkit/run_daily: true * chkrootkit/run_daily_opts: -q -n * chkrootkit/diff_mode: true -- <ex-bart> seen die_MACHT <Volk> I don't know who die_MACHT is.
signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---Source: chkrootkit Source-Version: 0.46a-4 We believe that the bug you reported is fixed in the latest version of chkrootkit, which is due to be installed in the Debian FTP archive: chkrootkit_0.46a-4.diff.gz to pool/main/c/chkrootkit/chkrootkit_0.46a-4.diff.gz chkrootkit_0.46a-4.dsc to pool/main/c/chkrootkit/chkrootkit_0.46a-4.dsc chkrootkit_0.46a-4_i386.deb to pool/main/c/chkrootkit/chkrootkit_0.46a-4_i386.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [EMAIL PROTECTED], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. lantz moore <[EMAIL PROTECTED]> (supplier of updated chkrootkit package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [EMAIL PROTECTED]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Sat, 30 Sep 2006 13:25:07 -0700 Source: chkrootkit Binary: chkrootkit Architecture: source i386 Version: 0.46a-4 Distribution: unstable Urgency: low Maintainer: lantz moore <[EMAIL PROTECTED]> Changed-By: lantz moore <[EMAIL PROTECTED]> Description: chkrootkit - Checks for signs of rootkits on the local system Closes: 322889 356774 358045 364296 365567 365715 374027 387312 387358 389520 Changes: chkrootkit (0.46a-4) unstable; urgency=low . * don't throw away results of find (closes: 365715) * fixed spelling mistake in chkwtmp.1 (closes: 365567) * added debconf translations (closes: 358045,364296,374027) * removed showtee libfl check since it would cause a false positive on most debian systems (closes: 387312,387358) * use -wholename in find instead of -name (closes: 389520) * tightened up LPD inetd regex (closes: 322889) * added knockd to README.FALSE-POSITIVES (closes: 356774) Files: 2b73a12b8cf43a77bb8699c0bef977d2 603 misc optional chkrootkit_0.46a-4.dsc 02b49cb47ecafcc30b0b23c83042a366 20107 misc optional chkrootkit_0.46a-4.diff.gz fc2a175fe03eade2ea86ff4b91522c70 261698 misc optional chkrootkit_0.46a-4_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (GNU/Linux) iD8DBQFFHu+jNFhjq9qkdRERAtcoAJ9PV+zft2DpoLEWeu7e6fGMX7AM3QCgmfuS S8LNAvAg663sVTcLd4Y61d0= =SExm -----END PGP SIGNATURE-----
--- End Message ---
