Accepted chkrootkit 0.55-2 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 09 Nov 2021 22:44:33 +0100
Source: chkrootkit
Architecture: source
Version: 0.55-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Security Tools <team+pkg-security@tracker.debian.org>
Changed-By: Marcos Fouces <marcos@debian.org>
Closes: 488558 630880 666989 669333 677315 745431 872379 877666 982998 994153
Changes:
chkrootkit (0.55-2) unstable; urgency=medium
.
[ Richard Lewis ]
* Move configuration to /etc/chkrootkit/chkrootkit.conf and manage
it as a conffile rather than via debconf
* This enables various improvements to /etc/cron.daily/chkrootkit:
- Improved default filtering and make filtering fully customisable
(Closes: #630880, #666989, #669333, #677315, #877666, #488558).
- run under ionice if possible (Closes: #745431)
* Remove messages "OooPS, not expected" messages from
chkproc by re-increasing MAX_PROCESSES to the upstream
value (Closes: #982998) and preventing chkproc sending kill signals
to processes to see if they might be malicious. (patches 55, 55a)
This does re-disable a test for Enye LKM.
* Prevent ckrootkit hanging when invoked from an LXC container
(Closes: #872379), thanks to Scott Barker for identifying the issue
(patch 61).
* Various improvement to the output of chkrootkit
- stop merging output of sniffer test into a single line so '-s'
can be used as intended (patch 60)
- fix the test of sshd so it runs when sshd is found
instead of when it is not (patch 56)
- ensure rexedcs tests produces any output when it finds
something suspicious (patch 60)
- ensure output lines up, especially if '-q' is not present
- remove spurious spaces (patch 53, 54, 55a,57, 58)
- do not list directories twice in list of 'suspicious' files (patch 59)
and show output when -q not given (patch 25a)
- fix spelling error in chkdirs output (patch 52)
- further improvements to output of 'chkrootkit -h' (edits to
patch 26, patch 26a)
* Remove bashism from d/25_fix-nfs-legacy-sniffers.patch.
(Closes: #994153).
* Documentation copy-edited for grammar (and occaisional accuracy)
* Update dependencies so that packages whose binaries are tested are listed
in 'Enhances' and add iproute2 as a preferred alternative to net-tools
* Update documentation of earlier patches (1-51), recording
which have been sent upstream
* Add some autopkgtests
.
[ Marcos Fouces ]
* Update copyright file.
Checksums-Sha1:
bdacfb408ab42b7f70adf8da154880d72da8d167 2003 chkrootkit_0.55-2.dsc
e3550706cdaad98733eea355f02ac9e37cc4d191 52796 chkrootkit_0.55-2.debian.tar.xz
371de47723918b5aeb3e071073aca4135a3ca2db 5825 chkrootkit_0.55-2_source.buildinfo
Checksums-Sha256:
6812e4820ebca20ac05f669523c1ce901c23f8c5f3b4ccb592b602b1975b9e3c 2003 chkrootkit_0.55-2.dsc
e82094ffe93209bb30a4dfe3b761c296538e7c30a813e342a39e44182fbf5e2a 52796 chkrootkit_0.55-2.debian.tar.xz
3630c8207ea4de13a3e3bc9e0703ee587112166396fae7637f5aa07091134200 5825 chkrootkit_0.55-2_source.buildinfo
Files:
21d757c9ff5b03423847b934b2c59379 2003 misc optional chkrootkit_0.55-2.dsc
d72fe06c67e3804f69c19611ce4c8e22 52796 misc optional chkrootkit_0.55-2.debian.tar.xz
c0616cccf385a1b9408ce3a6454eb792 5825 misc optional chkrootkit_0.55-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=PWWB
-----END PGP SIGNATURE-----