rpms/bugzilla/devel bugzilla.spec,1.7,1.8
by fedora-extras-commits@redhat.com
Author: jwb
Update of /cvs/extras/rpms/bugzilla/devel
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv23991
Modified Files:
bugzilla.spec
Log Message:
fix cron job perms
Index: bugzilla.spec
===================================================================
RCS file: /cvs/extras/rpms/bugzilla/devel/bugzilla.spec,v
retrieving revision 1.7
retrieving revision 1.8
diff -u -r1.7 -r1.8
--- bugzilla.spec 27 Jan 2007 16:30:20 -0000 1.7
+++ bugzilla.spec 31 Jan 2007 22:07:26 -0000 1.8
@@ -6,7 +6,7 @@
Name: bugzilla
Version: 2.22.1
Group: Applications/Publishing
-Release: 4%{?dist}
+Release: 5%{?dist}
License: MPL
Source0: http://ftp.mozilla.org/pub/mozilla.org/webtools/bugzilla-%{version}.tar.gz
Source1: bugzilla-httpd-conf
@@ -119,9 +119,10 @@
%{bzinstallprefix}/bugzilla/template
%ghost %{bzinstallprefix}/bugzilla/bugzilla-req
%config(noreplace) %{_sysconfdir}/httpd/conf.d/bugzilla.conf
-%defattr(0755,root,root,-)
+%defattr(0600,root,root,-)
%{_sysconfdir}/cron.daily/*
%{_sysconfdir}/cron.d/*
+%defattr(-,root,root,-)
%doc README
%doc QUICKSTART
%doc UPGRADING
@@ -137,6 +138,9 @@
%{bzinstallprefix}/bugzilla/contrib
%changelog
+* Wed Jan 31 2007 John Berninger <jwb at redhat dot com> - 2.22.1-5
+- Fix cron job perms
+
* Sat Jan 27 2007 John Berninger <jwb at redhat dot com> - 2.22.1-4
- Fix collectstats cron job, bz 224550
16 years, 10 months
rpms/bugzilla/FC-6 bugzilla.spec,1.6,1.7
by fedora-extras-commits@redhat.com
Author: jwb
Update of /cvs/extras/rpms/bugzilla/FC-6
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv23917
Modified Files:
bugzilla.spec
Log Message:
fix cron job perms
Index: bugzilla.spec
===================================================================
RCS file: /cvs/extras/rpms/bugzilla/FC-6/bugzilla.spec,v
retrieving revision 1.6
retrieving revision 1.7
diff -u -r1.6 -r1.7
--- bugzilla.spec 27 Jan 2007 16:28:33 -0000 1.6
+++ bugzilla.spec 31 Jan 2007 22:05:01 -0000 1.7
@@ -6,7 +6,7 @@
Name: bugzilla
Version: 2.22
Group: Applications/Publishing
-Release: 10%{?dist}
+Release: 11%{?dist}
License: MPL
Source0: http://ftp.mozilla.org/pub/mozilla.org/webtools/bugzilla-%{version}.tar.gz
Source1: bugzilla-httpd-conf
@@ -121,9 +121,10 @@
%{bzinstallprefix}/bugzilla/template
%ghost %{bzinstallprefix}/bugzilla/bugzilla-req
%config(noreplace) %{_sysconfdir}/httpd/conf.d/bugzilla.conf
-%defattr(0755,root,root,-)
+%defattr(0600,root,root,-)
%{_sysconfdir}/cron.daily/*
%{_sysconfdir}/cron.d/*
+%defattr(-,root,root,-)
%doc README
%doc QUICKSTART
%doc UPGRADING
@@ -139,6 +140,9 @@
%{bzinstallprefix}/bugzilla/contrib
%changelog
+* Wed Jan 31 2007 John Berninger <jwb at redhat dot com> - 2.22-11
+- Fix cron job perms
+
* Sat Jan 27 2007 John Berninger <jwb at redhat dot com> - 2.22-10
- Fix collectstats cron job, bx 224550
16 years, 10 months
rpms/bugzilla/FC-5 bugzilla.spec,1.6,1.7
by fedora-extras-commits@redhat.com
Author: jwb
Update of /cvs/extras/rpms/bugzilla/FC-5
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv23837
Modified Files:
bugzilla.spec
Log Message:
fix cron job perms - take 2
Index: bugzilla.spec
===================================================================
RCS file: /cvs/extras/rpms/bugzilla/FC-5/bugzilla.spec,v
retrieving revision 1.6
retrieving revision 1.7
diff -u -r1.6 -r1.7
--- bugzilla.spec 31 Jan 2007 22:01:36 -0000 1.6
+++ bugzilla.spec 31 Jan 2007 22:03:00 -0000 1.7
@@ -6,7 +6,7 @@
Name: bugzilla
Version: 2.22
Group: Applications/Publishing
-Release: 9%{?dist}
+Release: 10%{?dist}
License: MPL
Source0: http://ftp.mozilla.org/pub/mozilla.org/webtools/bugzilla-%{version}.tar.gz
Source1: bugzilla-httpd-conf
16 years, 10 months
rpms/bugzilla/FC-5 bugzilla.spec,1.5,1.6
by fedora-extras-commits@redhat.com
Author: jwb
Update of /cvs/extras/rpms/bugzilla/FC-5
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv23769
Modified Files:
bugzilla.spec
Log Message:
fix cron job perms
Index: bugzilla.spec
===================================================================
RCS file: /cvs/extras/rpms/bugzilla/FC-5/bugzilla.spec,v
retrieving revision 1.5
retrieving revision 1.6
diff -u -r1.5 -r1.6
--- bugzilla.spec 27 Jan 2007 16:27:33 -0000 1.5
+++ bugzilla.spec 31 Jan 2007 22:01:36 -0000 1.6
@@ -121,9 +121,10 @@
%{bzinstallprefix}/bugzilla/template
%ghost %{bzinstallprefix}/bugzilla/bugzilla-req
%config(noreplace) %{_sysconfdir}/httpd/conf.d/bugzilla.conf
-%defattr(0755,root,root,-)
+%defattr(0600,root,root,-)
%{_sysconfdir}/cron.daily/*
%{_sysconfdir}/cron.d/*
+%defattr(-,root,root,-)
%doc README
%doc QUICKSTART
%doc UPGRADING
@@ -139,6 +140,9 @@
%{bzinstallprefix}/bugzilla/contrib
%changelog
+* Wed Jan 31 2007 John Berninger <jwb at redhat dot com> - 2.22-10
+- Fix cron script permissions
+
* Sat Jan 27 2007 John Berninger <jwb at redhat dot com> - 2.22-9
- Fix collectstats daily cron job, bx 224550
16 years, 10 months
rpms/xine-lib/devel xine-lib-1.1.4-optflags.patch, NONE, 1.1 xine-lib-mk-autotools-patch.sh, NONE, 1.1 .cvsignore, 1.4, 1.5 sources, 1.4, 1.5 xine-lib.spec, 1.8, 1.9 xine-lib-1.1.3-flac113.patch, 1.1, NONE xine-lib-1.1.3-optflags.patch, 1.1, NONE
by fedora-extras-commits@redhat.com
Author: scop
Update of /cvs/extras/rpms/xine-lib/devel
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv13176
Modified Files:
.cvsignore sources xine-lib.spec
Added Files:
xine-lib-1.1.4-optflags.patch xine-lib-mk-autotools-patch.sh
Removed Files:
xine-lib-1.1.3-flac113.patch xine-lib-1.1.3-optflags.patch
Log Message:
* Wed Jan 31 2007 Ville Skyttä <ville.skytta at iki.fi> - 1.1.4-1
- 1.1.4, with wavpack and system libmpcdec support.
xine-lib-1.1.4-optflags.patch:
--- NEW FILE xine-lib-1.1.4-optflags.patch ---
--- xine-lib-1.1.4/m4/optimizations.m4~ 2006-06-17 18:20:56.000000000 +0300
+++ xine-lib-1.1.4/m4/optimizations.m4 2007-01-30 23:03:27.000000000 +0200
@@ -107,7 +107,7 @@
DEBUG_CFLAGS="-O $DEBUG_CFLAGS"
- if test x"$sarchopt" != "xno"; then
+ if false ; then
archopt_val=
case "$host_or_hostalias" in
--- xine-lib-1.1.4/configure~ 2007-01-30 23:02:56.000000000 +0200
+++ xine-lib-1.1.4/configure 2007-01-30 23:03:40.000000000 +0200
@@ -47754,7 +47754,7 @@
DEBUG_CFLAGS="-O $DEBUG_CFLAGS"
- if test x"$sarchopt" != "xno"; then
+ if false ; then
archopt_val=
case "$host_or_hostalias" in
--- NEW FILE xine-lib-mk-autotools-patch.sh ---
#!/bin/sh
# be sure to have all build deps + libtool installed before running this
set -e
if [ -z "$1" -o $# -ne 1 ]; then
echo "Usage: $0 <xine-lib-version>"
exit 2
fi
version=$1
rm -rf xine-lib-$version xine-lib-$version-pruned
tar jxf xine-lib-$version-pruned.tar.bz2
cp -a xine-lib-$version xine-lib-$version-pruned
cd xine-lib-$version
./autogen.sh noconfig
rm -rf autom4te.cache *~
cd ..
diff -Nru xine-lib-$version-pruned xine-lib-$version \
| bzip2 --best > xine-lib-$version-autotools.patch.bz2
Index: .cvsignore
===================================================================
RCS file: /cvs/extras/rpms/xine-lib/devel/.cvsignore,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -r1.4 -r1.5
--- .cvsignore 17 Dec 2006 11:41:11 -0000 1.4
+++ .cvsignore 31 Jan 2007 19:58:30 -0000 1.5
@@ -1,2 +1,2 @@
-xine-lib-1.1.3-pruned.tar.bz2
-xine-lib-1.1.3-autotools.patch.bz2
+xine-lib-1.1.4-pruned.tar.bz2
+xine-lib-1.1.4-autotools.patch.bz2
Index: sources
===================================================================
RCS file: /cvs/extras/rpms/xine-lib/devel/sources,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -r1.4 -r1.5
--- sources 17 Dec 2006 11:41:11 -0000 1.4
+++ sources 31 Jan 2007 19:58:30 -0000 1.5
@@ -1,2 +1,2 @@
-eff682745f198e1881773509f12c70c3 xine-lib-1.1.3-pruned.tar.bz2
-a58fce450d9288224caa413ad8bc1f8d xine-lib-1.1.3-autotools.patch.bz2
+81faabf1e38abed44639dbe4c76719f9 xine-lib-1.1.4-pruned.tar.bz2
+a916758545ed73a369f40648c7bc449c xine-lib-1.1.4-autotools.patch.bz2
Index: xine-lib.spec
===================================================================
RCS file: /cvs/extras/rpms/xine-lib/devel/xine-lib.spec,v
retrieving revision 1.8
retrieving revision 1.9
diff -u -r1.8 -r1.9
--- xine-lib.spec 18 Jan 2007 20:34:56 -0000 1.8
+++ xine-lib.spec 31 Jan 2007 19:58:30 -0000 1.9
@@ -1,29 +1,26 @@
# TODO, sometime, maybe:
# - libstk: http://www.libstk.net/
# - pulseaudio
+# - --enable-antialiasing?
%define codecdir %{_libdir}/codecs
Summary: Xine library
Name: xine-lib
-Version: 1.1.3
-Release: 4%{?dist}
+Version: 1.1.4
+Release: 1%{?dist}
License: GPL
Group: System Environment/Libraries
URL: http://xinehq.de/
# The tarball is generated from the upstream tarball using
# the script in SOURCE1. It prunes potentially patented code
-#Source0: http://dl.sourceforge.net/xine/xine-lib-%{version}.tar.gz
+#Source0: http://dl.sourceforge.net/xine/xine-lib-%{version}.tar.bz2
Source0: %{name}-%{version}-pruned.tar.bz2
Source1: %{name}-cleanup-sources.sh
-# To recreate the autotools patch: install build deps, extract source0,
-# remove run_configure "$@" from autogen.sh, copy the dir to -patched,
-# run autogen.sh (doesn't work with automake 1.10 as of 1.1.3 so use 1.9),
-# remove autom4te.cache, then diff the dirs. Apply rest of the patches during
-# build so that autotools do not need to be run again.
-Patch0: %{name}-1.1.3-autotools.patch.bz2
-Patch1: %{name}-1.1.3-optflags.patch
-Patch2: %{name}-1.1.3-flac113.patch
+Source2: %{name}-mk-autotools-patch.sh
+# autotools patch created with source2
+Patch0: %{name}-1.1.4-autotools.patch.bz2
+Patch1: %{name}-1.1.4-optflags.patch
Patch3: %{name}-1.1.3-legacy-flac-init.patch
Patch6: %{name}-1.1.1-deepbind-939.patch
Patch7: %{name}-1.1.1-multilib-devel.patch
@@ -45,7 +42,7 @@
# Audio
BuildRequires: libogg-devel libvorbis-devel flac-devel libmodplug-devel
BuildRequires: esound-devel speex-devel arts-devel alsa-lib-devel >= 0.9.0
-BuildRequires: jack-audio-connection-kit-devel
+BuildRequires: jack-audio-connection-kit-devel wavpack-devel libmpcdec-devel
# CDs
BuildRequires: libcdio-devel
# Other
@@ -101,10 +98,10 @@
%prep
%setup -q
%patch0 -p1 -b .autotools
-cp -p m4/optimizations.m4 m4/optimizations.m4.stamp
+touch -r configure.ac aclocal.m4
+touch -r m4/optimizations.m4 m4/optimizations.m4.stamp
%patch1 -p1 -b .optflags
touch -r m4/optimizations.m4.stamp m4/optimizations.m4
-%patch2 -p1 -b .flac113
%patch3 -p0 -b .legacy-flac-init
# Patch6 needed at least when compiling with external ffmpeg, #939.
%patch6 -p1 -b .deepbind
@@ -124,6 +121,9 @@
--with-xv-path=%{_libdir} \
--with-w32-path=%{codecdir} \
--with-external-ffmpeg \
+ --with-external-libmpcdec \
+ --with-libflac \
+ --with-wavpack \
--enable-ipv6 \
%if 0%{!?_without_directfb:1}
--enable-directfb \
@@ -149,8 +149,8 @@
rm -rf $RPM_BUILD_ROOT __docs
make install DESTDIR=$RPM_BUILD_ROOT
%find_lang libxine1
-cp -pR $RPM_BUILD_ROOT%{_docdir}/xine __docs
-rm -rf $RPM_BUILD_ROOT%{_docdir}/xine
+cp -pR $RPM_BUILD_ROOT%{_docdir}/xine-lib __docs
+rm -rf $RPM_BUILD_ROOT%{_docdir}/xine-lib
# Removing useless files
rm -Rf $RPM_BUILD_ROOT%{_libdir}/libxine.la __docs/README \
@@ -166,12 +166,14 @@
%post -p /sbin/ldconfig
+
%postun -p /sbin/ldconfig
%files -f libxine1.lang
%defattr(-,root,root,-)
-%doc AUTHORS COPYING CREDITS ChangeLog* README TODO __docs/README.* __docs/faq
+%doc AUTHORS COPYING CREDITS ChangeLog* README TODO
+%doc __docs/README.* __docs/faq.*
%dir %{codecdir}
%{_datadir}/xine
%{_libdir}/libxine.so.*
@@ -213,6 +215,7 @@
%{_libdir}/xine/plugins/%{version}/xineplug_decode_theora.so
%{_libdir}/xine/plugins/%{version}/xineplug_decode_spudvb.so
%{_libdir}/xine/plugins/%{version}/xineplug_decode_mpc.so
+%{_libdir}/xine/plugins/%{version}/xineplug_decode_sputext.so
%{_libdir}/xine/plugins/%{version}/xineplug_dmx_yuv_frames.so
%{_libdir}/xine/plugins/%{version}/xineplug_dmx_real.so
%{_libdir}/xine/plugins/%{version}/xineplug_dmx_audio.so
@@ -232,7 +235,7 @@
%{_libdir}/xine/plugins/%{version}/xineplug_dmx_games.so
%{_libdir}/xine/plugins/%{version}/xineplug_dmx_slave.so
%{_libdir}/xine/plugins/%{version}/xineplug_flac.so
-%{_libdir}/xine/plugins/%{version}/xineplug_decode_sputext.so
+%{_libdir}/xine/plugins/%{version}/xineplug_wavpack.so
%ifarch %ix86
%{_libdir}/xine/plugins/%{version}/xineplug_vo_out_vidix.so
%{_libdir}/xine/plugins/%{version}/xineplug_decode_qt.so
@@ -281,6 +284,9 @@
%changelog
+* Wed Jan 31 2007 Ville Skyttä <ville.skytta at iki.fi> - 1.1.4-1
+- 1.1.4, with wavpack and system libmpcdec support.
+
* Thu Jan 18 2007 Aurelien Bompard <abompard(a)fedoraproject.org> 1.1.3-4
- rebuild
--- xine-lib-1.1.3-flac113.patch DELETED ---
--- xine-lib-1.1.3-optflags.patch DELETED ---
16 years, 10 months
fedora-security/audit fe5,1.147,1.148 fe6,1.61,1.62
by fedora-extras-commits@redhat.com
Author: scop
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv12879
Modified Files:
fe5 fe6
Log Message:
+CVE-2007-0619 VULNERABLE (chmlib, fixed 0.3.9) #225919
Index: fe5
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fe5,v
retrieving revision 1.147
retrieving revision 1.148
diff -u -r1.147 -r1.148
--- fe5 30 Jan 2007 19:52:41 -0000 1.147
+++ fe5 31 Jan 2007 19:09:10 -0000 1.148
@@ -2,6 +2,7 @@
** are items that need attention
+CVE-2007-0619 VULNERABLE (chmlib, fixed 0.3.9) #225919
CVE-2007-0541 VULNERABLE (wordpress) #225469
CVE-2007-0540 VULNERABLE (wordpress) #225469
CVE-2007-0539 VULNERABLE (wordpress) #225469
Index: fe6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fe6,v
retrieving revision 1.61
retrieving revision 1.62
diff -u -r1.61 -r1.62
--- fe6 30 Jan 2007 19:52:41 -0000 1.61
+++ fe6 31 Jan 2007 19:09:10 -0000 1.62
@@ -2,6 +2,7 @@
** are items that need attention
+CVE-2007-0619 VULNERABLE (chmlib, fixed 0.3.9) #225919
CVE-2007-0541 VULNERABLE (wordpress) #225469
CVE-2007-0540 VULNERABLE (wordpress) #225469
CVE-2007-0539 VULNERABLE (wordpress) #225469
16 years, 10 months
rpms/chkrootkit/FC-6 chkrootkit-0.47-no-openbsd.patch,NONE,1.1
by fedora-extras-commits@redhat.com
Author: mschwendt
Update of /cvs/extras/rpms/chkrootkit/FC-6
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv12690/FC-6
Added Files:
chkrootkit-0.47-no-openbsd.patch
Log Message:
... and don't forget the patch ;)
chkrootkit-0.47-no-openbsd.patch:
--- NEW FILE chkrootkit-0.47-no-openbsd.patch ---
diff -Nur chkrootkit-0.47-orig/chkrootkit chkrootkit-0.47/chkrootkit
--- chkrootkit-0.47-orig/chkrootkit 2006-10-09 21:20:54.000000000 +0200
+++ chkrootkit-0.47/chkrootkit 2007-01-31 19:28:47.000000000 +0100
@@ -474,13 +474,6 @@
### MithRa's Rootkit
expertmode_output "${find} ${ROOTDIR}usr/lib/locale -name uboot"
-
- ### OpenBSD rootkit v1
- if [ "$SYSTEM" != "SunOS" -a ! -f /usr/lib/security/libgcj.security ]
- then
- expertmode_output "${find} ${ROOTDIR}usr/lib/security"
- fi
-
### LOC rootkit
expertmode_output "${find} ${ROOTDIR}tmp -name xp -o -name kidd0.c"
@@ -892,18 +885,6 @@
echo "${files}"
fi
- ### OpenBSD rootkit v1
- if [ "${SYSTEM}" != "SunOS" -a ! -f ${ROOTDIR}usr/lib/security/libgcj.security ]; then
- files=""
- if [ "${QUIET}" != "t" ];then printn "Searching for OBSD rk v1... "; fi
- files=`${find} ${ROOTDIR}usr/lib/security 2>/dev/null`
- if [ "${files}" = "" -o "${SYSTEM}" = "HP-UX" ]; then
- if [ "${QUIET}" != "t" ]; then echo "nothing found"; fi
- else
- echo "${files}"
- fi
- fi
-
### LOC rootkit
files=""
if [ "${QUIET}" != "t" ];then printn "Searching for LOC rootkit... "; fi
16 years, 10 months
rpms/chkrootkit/FC-5 chkrootkit-0.47-no-openbsd.patch,NONE,1.1
by fedora-extras-commits@redhat.com
Author: mschwendt
Update of /cvs/extras/rpms/chkrootkit/FC-5
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv12690/FC-5
Added Files:
chkrootkit-0.47-no-openbsd.patch
Log Message:
... and don't forget the patch ;)
chkrootkit-0.47-no-openbsd.patch:
--- NEW FILE chkrootkit-0.47-no-openbsd.patch ---
diff -Nur chkrootkit-0.47-orig/chkrootkit chkrootkit-0.47/chkrootkit
--- chkrootkit-0.47-orig/chkrootkit 2006-10-09 21:20:54.000000000 +0200
+++ chkrootkit-0.47/chkrootkit 2007-01-31 19:28:47.000000000 +0100
@@ -474,13 +474,6 @@
### MithRa's Rootkit
expertmode_output "${find} ${ROOTDIR}usr/lib/locale -name uboot"
-
- ### OpenBSD rootkit v1
- if [ "$SYSTEM" != "SunOS" -a ! -f /usr/lib/security/libgcj.security ]
- then
- expertmode_output "${find} ${ROOTDIR}usr/lib/security"
- fi
-
### LOC rootkit
expertmode_output "${find} ${ROOTDIR}tmp -name xp -o -name kidd0.c"
@@ -892,18 +885,6 @@
echo "${files}"
fi
- ### OpenBSD rootkit v1
- if [ "${SYSTEM}" != "SunOS" -a ! -f ${ROOTDIR}usr/lib/security/libgcj.security ]; then
- files=""
- if [ "${QUIET}" != "t" ];then printn "Searching for OBSD rk v1... "; fi
- files=`${find} ${ROOTDIR}usr/lib/security 2>/dev/null`
- if [ "${files}" = "" -o "${SYSTEM}" = "HP-UX" ]; then
- if [ "${QUIET}" != "t" ]; then echo "nothing found"; fi
- else
- echo "${files}"
- fi
- fi
-
### LOC rootkit
files=""
if [ "${QUIET}" != "t" ];then printn "Searching for LOC rootkit... "; fi
16 years, 10 months
rpms/chkrootkit/FC-6 README.false_positives, NONE, 1.1 chkrootkit.spec, 1.16, 1.17
by fedora-extras-commits@redhat.com
Author: mschwendt
Update of /cvs/extras/rpms/chkrootkit/FC-6
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv9087/FC-6
Modified Files:
chkrootkit.spec
Added Files:
README.false_positives
Log Message:
* Wed Jan 31 2007 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.47-2
- Upstream wants to disable the OBSD rk v1 check on Linux with
next release.
--- NEW FILE README.false_positives ---
This is an additional document added to the Fedora RPM package of
chkrootkit.
-----
It is in the nature of some of chkrootkit's checks that there may be some
false positives among the reported findings. The chkrootkit user is
advised to examine such files more closely (display them, query the RPM
database about them, compare with backups on read-only media) and use
another layer of protection (such as an intrusion detection tool).
For example, where it is searched for hidden files below /usr/lib, which
begin with a dot, chkrootkit may report files which belong into valid RPM
packages, or which have been created at run-time by some software, and
which are innocent. The output could look like this (the lines have been
wrapped for readability):
Searching for suspicious files and dirs, it may take a while...
/usr/lib/firefox-1.5.0.3/.autoreg
/usr/lib/firefox-1.5.0.2/.autoreg
/usr/lib/firefox-1.5.0.8/.autoreg
/usr/lib/firefox-1.5.0.1/.autoreg
/usr/lib/qt-3.3/etc/settings/.qt_plugins_3.3rc.lock
/usr/lib/qt-3.3/etc/settings/.qtrc.lock
/usr/lib/firefox-1.5/.autoreg
/usr/lib/perl5/5.8.8/i386-linux-thread-multi/.packlist
/usr/lib/firefox-1.5.0.4/.autoreg
In this example, the files are valid files from Firefox (previous and
current versions), Perl and the Qt GUI toolkit, but only the ".packlist"
file is included in the main "perl" package. Creating and maintaining a
simple white-list inside chkrootkit would bear the risk that a new rootkit
uses the knowledge about white-listed file locations to store its
malicious files.
Also see: http://www.chkrootkit.org/faq/
Index: chkrootkit.spec
===================================================================
RCS file: /cvs/extras/rpms/chkrootkit/FC-6/chkrootkit.spec,v
retrieving revision 1.16
retrieving revision 1.17
diff -u -r1.16 -r1.17
--- chkrootkit.spec 20 Oct 2006 12:47:12 -0000 1.16
+++ chkrootkit.spec 31 Jan 2007 18:34:53 -0000 1.17
@@ -1,6 +1,6 @@
Name: chkrootkit
Version: 0.47
-Release: 1%{?dist}
+Release: 2%{?dist}
Summary: Tool to locally check for signs of a rootkit
Group: Applications/System
License: BSD-like
@@ -11,10 +11,12 @@
Source3: chkrootkit.desktop
Source4: chkrootkit.console
Source5: chkrootkit.pam
+Source6: README.false_positives
Patch1: chkrootkit-0.44-getCMD.patch
Patch2: chkrootkit-0.44-inetd.patch
Patch3: chkrootkit-0.45-includes.patch
Patch4: chkrootkit-0.47-warnings.patch
+Patch5: chkrootkit-0.47-no-openbsd.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
BuildRequires: desktop-file-utils
@@ -42,6 +44,7 @@
%patch2 -p1 -b .inetd
%patch3 -p1 -b .includes
%patch4 -p1 -b .warnings
+%patch5 -p1 -b .no-openbsd
sed -i -e 's!\s\+(a)strip.*!!g' Makefile
@@ -89,6 +92,8 @@
--add-category X-Fedora \
%{SOURCE3}
+install -p %{SOURCE6} .
+
%clean
rm -rf ${RPM_BUILD_ROOT}
@@ -96,7 +101,7 @@
%files
%defattr(-,root,root,-)
-%doc ACKNOWLEDGMENTS COPYRIGHT README README.chklastlog README.chkwtmp chkrootkit.lsm
+%doc ACKNOWLEDGMENTS COPYRIGHT README README.chklastlog README.chkwtmp chkrootkit.lsm README.false_positives
%{_sbindir}/chkrootkit
%{_bindir}/chkrootkit
%{_bindir}/chkrootkitX
@@ -108,13 +113,14 @@
%changelog
+* Wed Jan 31 2007 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.47-2
+- Upstream wants to disable the OBSD rk v1 check on Linux with
+ next release.
+
* Fri Oct 20 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.47-1
- Update to 0.47.
- mark PAM and consolehelper files in /etc as config
-* Mon Aug 28 2006 Michael Schwendt <mschwendt[AT]users.sf.net>
-- rebuilt
-
* Sat Feb 25 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.46a-2
- rebuilt for FC5
16 years, 10 months
rpms/chkrootkit/FC-5 README.false_positives, NONE, 1.1 chkrootkit.spec, 1.15, 1.16
by fedora-extras-commits@redhat.com
Author: mschwendt
Update of /cvs/extras/rpms/chkrootkit/FC-5
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv9087/FC-5
Modified Files:
chkrootkit.spec
Added Files:
README.false_positives
Log Message:
* Wed Jan 31 2007 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.47-2
- Upstream wants to disable the OBSD rk v1 check on Linux with
next release.
--- NEW FILE README.false_positives ---
This is an additional document added to the Fedora RPM package of
chkrootkit.
-----
It is in the nature of some of chkrootkit's checks that there may be some
false positives among the reported findings. The chkrootkit user is
advised to examine such files more closely (display them, query the RPM
database about them, compare with backups on read-only media) and use
another layer of protection (such as an intrusion detection tool).
For example, where it is searched for hidden files below /usr/lib, which
begin with a dot, chkrootkit may report files which belong into valid RPM
packages, or which have been created at run-time by some software, and
which are innocent. The output could look like this (the lines have been
wrapped for readability):
Searching for suspicious files and dirs, it may take a while...
/usr/lib/firefox-1.5.0.3/.autoreg
/usr/lib/firefox-1.5.0.2/.autoreg
/usr/lib/firefox-1.5.0.8/.autoreg
/usr/lib/firefox-1.5.0.1/.autoreg
/usr/lib/qt-3.3/etc/settings/.qt_plugins_3.3rc.lock
/usr/lib/qt-3.3/etc/settings/.qtrc.lock
/usr/lib/firefox-1.5/.autoreg
/usr/lib/perl5/5.8.8/i386-linux-thread-multi/.packlist
/usr/lib/firefox-1.5.0.4/.autoreg
In this example, the files are valid files from Firefox (previous and
current versions), Perl and the Qt GUI toolkit, but only the ".packlist"
file is included in the main "perl" package. Creating and maintaining a
simple white-list inside chkrootkit would bear the risk that a new rootkit
uses the knowledge about white-listed file locations to store its
malicious files.
Also see: http://www.chkrootkit.org/faq/
Index: chkrootkit.spec
===================================================================
RCS file: /cvs/extras/rpms/chkrootkit/FC-5/chkrootkit.spec,v
retrieving revision 1.15
retrieving revision 1.16
diff -u -r1.15 -r1.16
--- chkrootkit.spec 20 Oct 2006 12:51:26 -0000 1.15
+++ chkrootkit.spec 31 Jan 2007 18:34:52 -0000 1.16
@@ -1,6 +1,6 @@
Name: chkrootkit
Version: 0.47
-Release: 1%{?dist}
+Release: 2%{?dist}
Summary: Tool to locally check for signs of a rootkit
Group: Applications/System
License: BSD-like
@@ -11,10 +11,12 @@
Source3: chkrootkit.desktop
Source4: chkrootkit.console
Source5: chkrootkit.pam
+Source6: README.false_positives
Patch1: chkrootkit-0.44-getCMD.patch
Patch2: chkrootkit-0.44-inetd.patch
Patch3: chkrootkit-0.45-includes.patch
Patch4: chkrootkit-0.47-warnings.patch
+Patch5: chkrootkit-0.47-no-openbsd.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
BuildRequires: desktop-file-utils
@@ -42,6 +44,7 @@
%patch2 -p1 -b .inetd
%patch3 -p1 -b .includes
%patch4 -p1 -b .warnings
+%patch5 -p1 -b .no-openbsd
sed -i -e 's!\s\+(a)strip.*!!g' Makefile
@@ -89,6 +92,8 @@
--add-category X-Fedora \
%{SOURCE3}
+install -p %{SOURCE6} .
+
%clean
rm -rf ${RPM_BUILD_ROOT}
@@ -96,7 +101,7 @@
%files
%defattr(-,root,root,-)
-%doc ACKNOWLEDGMENTS COPYRIGHT README README.chklastlog README.chkwtmp chkrootkit.lsm
+%doc ACKNOWLEDGMENTS COPYRIGHT README README.chklastlog README.chkwtmp chkrootkit.lsm README.false_positives
%{_sbindir}/chkrootkit
%{_bindir}/chkrootkit
%{_bindir}/chkrootkitX
@@ -108,6 +113,10 @@
%changelog
+* Wed Jan 31 2007 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.47-2
+- Upstream wants to disable the OBSD rk v1 check on Linux with
+ next release.
+
* Fri Oct 20 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.47-1
- Update to 0.47.
- mark PAM and consolehelper files in /etc as config
16 years, 10 months