You are not logged in.

#1 2019-01-06 21:37:39

cfr
Member
From: Cymru
Registered: 2011-11-27
Posts: 6,101

Is the old PKGBUILD for chkrootkit available anywhere?

Is it possible to find the old PKGBUILD for chkrootkit? According to https://bbs.archlinux.org/viewtopic.php?id=222830, it used to be in AUR but was possibly dropped due to reliance on an outdated netstat. However, I noticed that a new version of the software was released after that thread was posted (http://www.chkrootkit.org/), so I'm wondering if it might now be possible to compile the package again with current netstat.

I'd like to do this because chkrootkit, unlike current rkhunter, can be run from a live medium to check a system independently. (It's possible to check some things with rkhunter this way, but lots of tests just get run against the live medium, even when I edit the configuration file as well as I could, whereas chkrootkit offers a simple command-line switch for this purpose.)


How To Ask Questions The Smart Way | Help Vampires

Arch Linux | x86_64 | GPT | EFI boot | refind | stub loader | systemd | LVM2 on LUKS
Lenovo x270 | Intel(R) Core(TM) i5-7200U CPU @ 2.50GHz | Intel Corporation Wireless 8265 / 8275 | US keyboard with Euro | 512G NVMe INTEL SSDPEKKF512G7L

Offline

#2 2019-01-06 21:48:32

graysky
Wiki Maintainer
From: :wq
Registered: 2008-12-01
Posts: 9,611
Website

Re: Is the old PKGBUILD for chkrootkit available anywhere?

From Aug 08, 2015:

# Maintainer: Arthur Zamarin <arthurzam@gmail.com> 

pkgname=chkrootkit
pkgver=0.50
pkgrel=2
pkgdesc="rootkit detector"
arch=(i686 x86_64)
url="http://www.chkrootkit.org/"
license=('GPL2')
source=("ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz")
sha256sums=('9548fc922b0cb8ddf055faff4a4887f140a31c45f2f5e3aa64aad91ecfa56cc7')
depends=('net-tools')

build() {
  cd "$srcdir/$pkgname-$pkgver"
  make
}

package() {
  cd "$srcdir/$pkgname-$pkgver"
  for f in check_wtmpx chkdirs chklastlog chkproc chkrootkit chkutmp chkwtmp ifpromisc; do
    install -Dm755 "$srcdir/$pkgname-$pkgver/$f" "$pkgdir/usr/bin/$f"
  done
}

CPU-optimized Linux-ck packages @ Repo-ck  • AUR packagesZsh and other configs

Offline

#3 2019-01-06 21:51:46

eschwartz
Trusted User/Bug Wrangler
Registered: 2014-08-08
Posts: 2,698

Re: Is the old PKGBUILD for chkrootkit available anywhere?

Yes -- the git repository backing the package is never deleted.

If the package was removed because it depended on deprecated things and was not deemed as being useful anymore, or alternatively deleted because it had dependencies that were missing from the AUR and no one was interested in (re-)uploading/fixing them, then anyone who is willing and interested in fixing the issues with the package is welcomed to reinstate it and take up active maintainership for it (and even better if they can update it to new versions that hopefully fix these problems).

We even include an ssh interface command to make this easier, see `ssh aur@aur.archlinux.org help` for details

Disclaimer: Obviously that is never an excuse for people who know of a package and know that it was deleted for breaking the rules or something, to reupload a package in bad faith.

But for this case, where a package was seemingly deleted due to lack of interest, it seems reasonable to me to re-upload it even as-is, now that there is interest.

Last edited by eschwartz (2019-01-06 21:52:27)


Managing AUR repos The Right Way -- aurpublish (now a standalone tool)

Offline

Board footer

Powered by FluxBB