scm-commits January 2007

scm-commits@lists.fedoraproject.org

1 participants
2872 discussions

rpms/bugzilla/devel bugzilla.spec,1.7,1.8
by fedora-extras-commits＠redhat.com 31 Jan '07

31 Jan '07

Author: jwb Update of /cvs/extras/rpms/bugzilla/devel In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv23991 Modified Files: bugzilla.spec Log Message: fix cron job perms Index: bugzilla.spec =================================================================== RCS file: /cvs/extras/rpms/bugzilla/devel/bugzilla.spec,v retrieving revision 1.7 retrieving revision 1.8 diff -u -r1.7 -r1.8 --- bugzilla.spec 27 Jan 2007 16:30:20 -0000 1.7 +++ bugzilla.spec 31 Jan 2007 22:07:26 -0000 1.8 @@ -6,7 +6,7 @@ Name: bugzilla Version: 2.22.1 Group: Applications/Publishing -Release: 4%{?dist} +Release: 5%{?dist} License: MPL Source0: http://ftp.mozilla.org/pub/mozilla.org/webtools/bugzilla-%{version}.tar.gz Source1: bugzilla-httpd-conf @@ -119,9 +119,10 @@ %{bzinstallprefix}/bugzilla/template %ghost %{bzinstallprefix}/bugzilla/bugzilla-req %config(noreplace) %{_sysconfdir}/httpd/conf.d/bugzilla.conf -%defattr(0755,root,root,-) +%defattr(0600,root,root,-) %{_sysconfdir}/cron.daily/* %{_sysconfdir}/cron.d/* +%defattr(-,root,root,-) %doc README %doc QUICKSTART %doc UPGRADING @@ -137,6 +138,9 @@ %{bzinstallprefix}/bugzilla/contrib %changelog +* Wed Jan 31 2007 John Berninger <jwb at redhat dot com> - 2.22.1-5 +- Fix cron job perms + * Sat Jan 27 2007 John Berninger <jwb at redhat dot com> - 2.22.1-4 - Fix collectstats cron job, bz 224550

1 0

rpms/bugzilla/FC-6 bugzilla.spec,1.6,1.7
by fedora-extras-commits＠redhat.com 31 Jan '07

31 Jan '07

Author: jwb Update of /cvs/extras/rpms/bugzilla/FC-6 In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv23917 Modified Files: bugzilla.spec Log Message: fix cron job perms Index: bugzilla.spec =================================================================== RCS file: /cvs/extras/rpms/bugzilla/FC-6/bugzilla.spec,v retrieving revision 1.6 retrieving revision 1.7 diff -u -r1.6 -r1.7 --- bugzilla.spec 27 Jan 2007 16:28:33 -0000 1.6 +++ bugzilla.spec 31 Jan 2007 22:05:01 -0000 1.7 @@ -6,7 +6,7 @@ Name: bugzilla Version: 2.22 Group: Applications/Publishing -Release: 10%{?dist} +Release: 11%{?dist} License: MPL Source0: http://ftp.mozilla.org/pub/mozilla.org/webtools/bugzilla-%{version}.tar.gz Source1: bugzilla-httpd-conf @@ -121,9 +121,10 @@ %{bzinstallprefix}/bugzilla/template %ghost %{bzinstallprefix}/bugzilla/bugzilla-req %config(noreplace) %{_sysconfdir}/httpd/conf.d/bugzilla.conf -%defattr(0755,root,root,-) +%defattr(0600,root,root,-) %{_sysconfdir}/cron.daily/* %{_sysconfdir}/cron.d/* +%defattr(-,root,root,-) %doc README %doc QUICKSTART %doc UPGRADING @@ -139,6 +140,9 @@ %{bzinstallprefix}/bugzilla/contrib %changelog +* Wed Jan 31 2007 John Berninger <jwb at redhat dot com> - 2.22-11 +- Fix cron job perms + * Sat Jan 27 2007 John Berninger <jwb at redhat dot com> - 2.22-10 - Fix collectstats cron job, bx 224550

1 0

rpms/bugzilla/FC-5 bugzilla.spec,1.6,1.7
by fedora-extras-commits＠redhat.com 31 Jan '07

31 Jan '07

Author: jwb Update of /cvs/extras/rpms/bugzilla/FC-5 In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv23837 Modified Files: bugzilla.spec Log Message: fix cron job perms - take 2 Index: bugzilla.spec =================================================================== RCS file: /cvs/extras/rpms/bugzilla/FC-5/bugzilla.spec,v retrieving revision 1.6 retrieving revision 1.7 diff -u -r1.6 -r1.7 --- bugzilla.spec 31 Jan 2007 22:01:36 -0000 1.6 +++ bugzilla.spec 31 Jan 2007 22:03:00 -0000 1.7 @@ -6,7 +6,7 @@ Name: bugzilla Version: 2.22 Group: Applications/Publishing -Release: 9%{?dist} +Release: 10%{?dist} License: MPL Source0: http://ftp.mozilla.org/pub/mozilla.org/webtools/bugzilla-%{version}.tar.gz Source1: bugzilla-httpd-conf

1 0

rpms/bugzilla/FC-5 bugzilla.spec,1.5,1.6
by fedora-extras-commits＠redhat.com 31 Jan '07

31 Jan '07

Author: jwb Update of /cvs/extras/rpms/bugzilla/FC-5 In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv23769 Modified Files: bugzilla.spec Log Message: fix cron job perms Index: bugzilla.spec =================================================================== RCS file: /cvs/extras/rpms/bugzilla/FC-5/bugzilla.spec,v retrieving revision 1.5 retrieving revision 1.6 diff -u -r1.5 -r1.6 --- bugzilla.spec 27 Jan 2007 16:27:33 -0000 1.5 +++ bugzilla.spec 31 Jan 2007 22:01:36 -0000 1.6 @@ -121,9 +121,10 @@ %{bzinstallprefix}/bugzilla/template %ghost %{bzinstallprefix}/bugzilla/bugzilla-req %config(noreplace) %{_sysconfdir}/httpd/conf.d/bugzilla.conf -%defattr(0755,root,root,-) +%defattr(0600,root,root,-) %{_sysconfdir}/cron.daily/* %{_sysconfdir}/cron.d/* +%defattr(-,root,root,-) %doc README %doc QUICKSTART %doc UPGRADING @@ -139,6 +140,9 @@ %{bzinstallprefix}/bugzilla/contrib %changelog +* Wed Jan 31 2007 John Berninger <jwb at redhat dot com> - 2.22-10 +- Fix cron script permissions + * Sat Jan 27 2007 John Berninger <jwb at redhat dot com> - 2.22-9 - Fix collectstats daily cron job, bx 224550

1 0

rpms/xine-lib/devel xine-lib-1.1.4-optflags.patch, NONE, 1.1 xine-lib-mk-autotools-patch.sh, NONE, 1.1 .cvsignore, 1.4, 1.5 sources, 1.4, 1.5 xine-lib.spec, 1.8, 1.9 xine-lib-1.1.3-flac113.patch, 1.1, NONE xine-lib-1.1.3-optflags.patch, 1.1, NONE
by fedora-extras-commits＠redhat.com 31 Jan '07

31 Jan '07

Author: scop Update of /cvs/extras/rpms/xine-lib/devel In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv13176 Modified Files: .cvsignore sources xine-lib.spec Added Files: xine-lib-1.1.4-optflags.patch xine-lib-mk-autotools-patch.sh Removed Files: xine-lib-1.1.3-flac113.patch xine-lib-1.1.3-optflags.patch Log Message: * Wed Jan 31 2007 Ville Skyttä <ville.skytta at iki.fi> - 1.1.4-1 - 1.1.4, with wavpack and system libmpcdec support. xine-lib-1.1.4-optflags.patch: --- NEW FILE xine-lib-1.1.4-optflags.patch --- --- xine-lib-1.1.4/m4/optimizations.m4~ 2006-06-17 18:20:56.000000000 +0300 +++ xine-lib-1.1.4/m4/optimizations.m4 2007-01-30 23:03:27.000000000 +0200 @@ -107,7 +107,7 @@ DEBUG_CFLAGS="-O $DEBUG_CFLAGS" - if test x"$sarchopt" != "xno"; then + if false ; then archopt_val= case "$host_or_hostalias" in --- xine-lib-1.1.4/configure~ 2007-01-30 23:02:56.000000000 +0200 +++ xine-lib-1.1.4/configure 2007-01-30 23:03:40.000000000 +0200 @@ -47754,7 +47754,7 @@ DEBUG_CFLAGS="-O $DEBUG_CFLAGS" - if test x"$sarchopt" != "xno"; then + if false ; then archopt_val= case "$host_or_hostalias" in --- NEW FILE xine-lib-mk-autotools-patch.sh --- #!/bin/sh # be sure to have all build deps + libtool installed before running this set -e if [ -z "$1" -o $# -ne 1 ]; then echo "Usage: $0 <xine-lib-version>" exit 2 fi version=$1 rm -rf xine-lib-$version xine-lib-$version-pruned tar jxf xine-lib-$version-pruned.tar.bz2 cp -a xine-lib-$version xine-lib-$version-pruned cd xine-lib-$version ./autogen.sh noconfig rm -rf autom4te.cache *~ cd .. diff -Nru xine-lib-$version-pruned xine-lib-$version \ | bzip2 --best > xine-lib-$version-autotools.patch.bz2 Index: .cvsignore =================================================================== RCS file: /cvs/extras/rpms/xine-lib/devel/.cvsignore,v retrieving revision 1.4 retrieving revision 1.5 diff -u -r1.4 -r1.5 --- .cvsignore 17 Dec 2006 11:41:11 -0000 1.4 +++ .cvsignore 31 Jan 2007 19:58:30 -0000 1.5 @@ -1,2 +1,2 @@ -xine-lib-1.1.3-pruned.tar.bz2 -xine-lib-1.1.3-autotools.patch.bz2 +xine-lib-1.1.4-pruned.tar.bz2 +xine-lib-1.1.4-autotools.patch.bz2 Index: sources =================================================================== RCS file: /cvs/extras/rpms/xine-lib/devel/sources,v retrieving revision 1.4 retrieving revision 1.5 diff -u -r1.4 -r1.5 --- sources 17 Dec 2006 11:41:11 -0000 1.4 +++ sources 31 Jan 2007 19:58:30 -0000 1.5 @@ -1,2 +1,2 @@ -eff682745f198e1881773509f12c70c3 xine-lib-1.1.3-pruned.tar.bz2 -a58fce450d9288224caa413ad8bc1f8d xine-lib-1.1.3-autotools.patch.bz2 +81faabf1e38abed44639dbe4c76719f9 xine-lib-1.1.4-pruned.tar.bz2 +a916758545ed73a369f40648c7bc449c xine-lib-1.1.4-autotools.patch.bz2 Index: xine-lib.spec =================================================================== RCS file: /cvs/extras/rpms/xine-lib/devel/xine-lib.spec,v retrieving revision 1.8 retrieving revision 1.9 diff -u -r1.8 -r1.9 --- xine-lib.spec 18 Jan 2007 20:34:56 -0000 1.8 +++ xine-lib.spec 31 Jan 2007 19:58:30 -0000 1.9 @@ -1,29 +1,26 @@ # TODO, sometime, maybe: # - libstk: http://www.libstk.net/ # - pulseaudio +# - --enable-antialiasing? %define codecdir %{_libdir}/codecs Summary: Xine library Name: xine-lib -Version: 1.1.3 -Release: 4%{?dist} +Version: 1.1.4 +Release: 1%{?dist} License: GPL Group: System Environment/Libraries URL: http://xinehq.de/ # The tarball is generated from the upstream tarball using # the script in SOURCE1. It prunes potentially patented code -#Source0: http://dl.sourceforge.net/xine/xine-lib-%{version}.tar.gz +#Source0: http://dl.sourceforge.net/xine/xine-lib-%{version}.tar.bz2 Source0: %{name}-%{version}-pruned.tar.bz2 Source1: %{name}-cleanup-sources.sh -# To recreate the autotools patch: install build deps, extract source0, -# remove run_configure "$@" from autogen.sh, copy the dir to -patched, -# run autogen.sh (doesn't work with automake 1.10 as of 1.1.3 so use 1.9), -# remove autom4te.cache, then diff the dirs. Apply rest of the patches during -# build so that autotools do not need to be run again. -Patch0: %{name}-1.1.3-autotools.patch.bz2 -Patch1: %{name}-1.1.3-optflags.patch -Patch2: %{name}-1.1.3-flac113.patch +Source2: %{name}-mk-autotools-patch.sh +# autotools patch created with source2 +Patch0: %{name}-1.1.4-autotools.patch.bz2 +Patch1: %{name}-1.1.4-optflags.patch Patch3: %{name}-1.1.3-legacy-flac-init.patch Patch6: %{name}-1.1.1-deepbind-939.patch Patch7: %{name}-1.1.1-multilib-devel.patch @@ -45,7 +42,7 @@ # Audio BuildRequires: libogg-devel libvorbis-devel flac-devel libmodplug-devel BuildRequires: esound-devel speex-devel arts-devel alsa-lib-devel >= 0.9.0 -BuildRequires: jack-audio-connection-kit-devel +BuildRequires: jack-audio-connection-kit-devel wavpack-devel libmpcdec-devel # CDs BuildRequires: libcdio-devel # Other @@ -101,10 +98,10 @@ %prep %setup -q %patch0 -p1 -b .autotools -cp -p m4/optimizations.m4 m4/optimizations.m4.stamp +touch -r configure.ac aclocal.m4 +touch -r m4/optimizations.m4 m4/optimizations.m4.stamp %patch1 -p1 -b .optflags touch -r m4/optimizations.m4.stamp m4/optimizations.m4 -%patch2 -p1 -b .flac113 %patch3 -p0 -b .legacy-flac-init # Patch6 needed at least when compiling with external ffmpeg, #939. %patch6 -p1 -b .deepbind @@ -124,6 +121,9 @@ --with-xv-path=%{_libdir} \ --with-w32-path=%{codecdir} \ --with-external-ffmpeg \ + --with-external-libmpcdec \ + --with-libflac \ + --with-wavpack \ --enable-ipv6 \ %if 0%{!?_without_directfb:1} --enable-directfb \ @@ -149,8 +149,8 @@ rm -rf $RPM_BUILD_ROOT __docs make install DESTDIR=$RPM_BUILD_ROOT %find_lang libxine1 -cp -pR $RPM_BUILD_ROOT%{_docdir}/xine __docs -rm -rf $RPM_BUILD_ROOT%{_docdir}/xine +cp -pR $RPM_BUILD_ROOT%{_docdir}/xine-lib __docs +rm -rf $RPM_BUILD_ROOT%{_docdir}/xine-lib # Removing useless files rm -Rf $RPM_BUILD_ROOT%{_libdir}/libxine.la __docs/README \ @@ -166,12 +166,14 @@ %post -p /sbin/ldconfig + %postun -p /sbin/ldconfig %files -f libxine1.lang %defattr(-,root,root,-) -%doc AUTHORS COPYING CREDITS ChangeLog* README TODO __docs/README.* __docs/faq +%doc AUTHORS COPYING CREDITS ChangeLog* README TODO +%doc __docs/README.* __docs/faq.* %dir %{codecdir} %{_datadir}/xine %{_libdir}/libxine.so.* @@ -213,6 +215,7 @@ %{_libdir}/xine/plugins/%{version}/xineplug_decode_theora.so %{_libdir}/xine/plugins/%{version}/xineplug_decode_spudvb.so %{_libdir}/xine/plugins/%{version}/xineplug_decode_mpc.so +%{_libdir}/xine/plugins/%{version}/xineplug_decode_sputext.so %{_libdir}/xine/plugins/%{version}/xineplug_dmx_yuv_frames.so %{_libdir}/xine/plugins/%{version}/xineplug_dmx_real.so %{_libdir}/xine/plugins/%{version}/xineplug_dmx_audio.so @@ -232,7 +235,7 @@ %{_libdir}/xine/plugins/%{version}/xineplug_dmx_games.so %{_libdir}/xine/plugins/%{version}/xineplug_dmx_slave.so %{_libdir}/xine/plugins/%{version}/xineplug_flac.so -%{_libdir}/xine/plugins/%{version}/xineplug_decode_sputext.so +%{_libdir}/xine/plugins/%{version}/xineplug_wavpack.so %ifarch %ix86 %{_libdir}/xine/plugins/%{version}/xineplug_vo_out_vidix.so %{_libdir}/xine/plugins/%{version}/xineplug_decode_qt.so @@ -281,6 +284,9 @@ %changelog +* Wed Jan 31 2007 Ville Skyttä <ville.skytta at iki.fi> - 1.1.4-1 +- 1.1.4, with wavpack and system libmpcdec support. + * Thu Jan 18 2007 Aurelien Bompard <abompard(a)fedoraproject.org> 1.1.3-4 - rebuild --- xine-lib-1.1.3-flac113.patch DELETED --- --- xine-lib-1.1.3-optflags.patch DELETED ---

1 0

fedora-security/audit fe5,1.147,1.148 fe6,1.61,1.62
by fedora-extras-commits＠redhat.com 31 Jan '07

31 Jan '07

Author: scop Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv12879 Modified Files: fe5 fe6 Log Message: +CVE-2007-0619 VULNERABLE (chmlib, fixed 0.3.9) #225919 Index: fe5 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fe5,v retrieving revision 1.147 retrieving revision 1.148 diff -u -r1.147 -r1.148 --- fe5 30 Jan 2007 19:52:41 -0000 1.147 +++ fe5 31 Jan 2007 19:09:10 -0000 1.148 @@ -2,6 +2,7 @@ ** are items that need attention +CVE-2007-0619 VULNERABLE (chmlib, fixed 0.3.9) #225919 CVE-2007-0541 VULNERABLE (wordpress) #225469 CVE-2007-0540 VULNERABLE (wordpress) #225469 CVE-2007-0539 VULNERABLE (wordpress) #225469 Index: fe6 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fe6,v retrieving revision 1.61 retrieving revision 1.62 diff -u -r1.61 -r1.62 --- fe6 30 Jan 2007 19:52:41 -0000 1.61 +++ fe6 31 Jan 2007 19:09:10 -0000 1.62 @@ -2,6 +2,7 @@ ** are items that need attention +CVE-2007-0619 VULNERABLE (chmlib, fixed 0.3.9) #225919 CVE-2007-0541 VULNERABLE (wordpress) #225469 CVE-2007-0540 VULNERABLE (wordpress) #225469 CVE-2007-0539 VULNERABLE (wordpress) #225469

1 0

rpms/chkrootkit/FC-6 chkrootkit-0.47-no-openbsd.patch,NONE,1.1
by fedora-extras-commits＠redhat.com 31 Jan '07

31 Jan '07

Author: mschwendt Update of /cvs/extras/rpms/chkrootkit/FC-6 In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv12690/FC-6 Added Files: chkrootkit-0.47-no-openbsd.patch Log Message: ... and don't forget the patch ;) chkrootkit-0.47-no-openbsd.patch: --- NEW FILE chkrootkit-0.47-no-openbsd.patch --- diff -Nur chkrootkit-0.47-orig/chkrootkit chkrootkit-0.47/chkrootkit --- chkrootkit-0.47-orig/chkrootkit 2006-10-09 21:20:54.000000000 +0200 +++ chkrootkit-0.47/chkrootkit 2007-01-31 19:28:47.000000000 +0100 @@ -474,13 +474,6 @@ ### MithRa's Rootkit expertmode_output "${find} ${ROOTDIR}usr/lib/locale -name uboot" - - ### OpenBSD rootkit v1 - if [ "$SYSTEM" != "SunOS" -a ! -f /usr/lib/security/libgcj.security ] - then - expertmode_output "${find} ${ROOTDIR}usr/lib/security" - fi - ### LOC rootkit expertmode_output "${find} ${ROOTDIR}tmp -name xp -o -name kidd0.c" @@ -892,18 +885,6 @@ echo "${files}" fi - ### OpenBSD rootkit v1 - if [ "${SYSTEM}" != "SunOS" -a ! -f ${ROOTDIR}usr/lib/security/libgcj.security ]; then - files="" - if [ "${QUIET}" != "t" ];then printn "Searching for OBSD rk v1... "; fi - files=`${find} ${ROOTDIR}usr/lib/security 2>/dev/null` - if [ "${files}" = "" -o "${SYSTEM}" = "HP-UX" ]; then - if [ "${QUIET}" != "t" ]; then echo "nothing found"; fi - else - echo "${files}" - fi - fi - ### LOC rootkit files="" if [ "${QUIET}" != "t" ];then printn "Searching for LOC rootkit... "; fi

1 0

rpms/chkrootkit/FC-5 chkrootkit-0.47-no-openbsd.patch,NONE,1.1
by fedora-extras-commits＠redhat.com 31 Jan '07

31 Jan '07

Author: mschwendt Update of /cvs/extras/rpms/chkrootkit/FC-5 In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv12690/FC-5 Added Files: chkrootkit-0.47-no-openbsd.patch Log Message: ... and don't forget the patch ;) chkrootkit-0.47-no-openbsd.patch: --- NEW FILE chkrootkit-0.47-no-openbsd.patch --- diff -Nur chkrootkit-0.47-orig/chkrootkit chkrootkit-0.47/chkrootkit --- chkrootkit-0.47-orig/chkrootkit 2006-10-09 21:20:54.000000000 +0200 +++ chkrootkit-0.47/chkrootkit 2007-01-31 19:28:47.000000000 +0100 @@ -474,13 +474,6 @@ ### MithRa's Rootkit expertmode_output "${find} ${ROOTDIR}usr/lib/locale -name uboot" - - ### OpenBSD rootkit v1 - if [ "$SYSTEM" != "SunOS" -a ! -f /usr/lib/security/libgcj.security ] - then - expertmode_output "${find} ${ROOTDIR}usr/lib/security" - fi - ### LOC rootkit expertmode_output "${find} ${ROOTDIR}tmp -name xp -o -name kidd0.c" @@ -892,18 +885,6 @@ echo "${files}" fi - ### OpenBSD rootkit v1 - if [ "${SYSTEM}" != "SunOS" -a ! -f ${ROOTDIR}usr/lib/security/libgcj.security ]; then - files="" - if [ "${QUIET}" != "t" ];then printn "Searching for OBSD rk v1... "; fi - files=`${find} ${ROOTDIR}usr/lib/security 2>/dev/null` - if [ "${files}" = "" -o "${SYSTEM}" = "HP-UX" ]; then - if [ "${QUIET}" != "t" ]; then echo "nothing found"; fi - else - echo "${files}" - fi - fi - ### LOC rootkit files="" if [ "${QUIET}" != "t" ];then printn "Searching for LOC rootkit... "; fi

1 0

rpms/chkrootkit/FC-6 README.false_positives, NONE, 1.1 chkrootkit.spec, 1.16, 1.17
by fedora-extras-commits＠redhat.com 31 Jan '07

31 Jan '07

Author: mschwendt Update of /cvs/extras/rpms/chkrootkit/FC-6 In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv9087/FC-6 Modified Files: chkrootkit.spec Added Files: README.false_positives Log Message: * Wed Jan 31 2007 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.47-2 - Upstream wants to disable the OBSD rk v1 check on Linux with next release. --- NEW FILE README.false_positives --- This is an additional document added to the Fedora RPM package of chkrootkit. ----- It is in the nature of some of chkrootkit's checks that there may be some false positives among the reported findings. The chkrootkit user is advised to examine such files more closely (display them, query the RPM database about them, compare with backups on read-only media) and use another layer of protection (such as an intrusion detection tool). For example, where it is searched for hidden files below /usr/lib, which begin with a dot, chkrootkit may report files which belong into valid RPM packages, or which have been created at run-time by some software, and which are innocent. The output could look like this (the lines have been wrapped for readability): Searching for suspicious files and dirs, it may take a while... /usr/lib/firefox-1.5.0.3/.autoreg /usr/lib/firefox-1.5.0.2/.autoreg /usr/lib/firefox-1.5.0.8/.autoreg /usr/lib/firefox-1.5.0.1/.autoreg /usr/lib/qt-3.3/etc/settings/.qt_plugins_3.3rc.lock /usr/lib/qt-3.3/etc/settings/.qtrc.lock /usr/lib/firefox-1.5/.autoreg /usr/lib/perl5/5.8.8/i386-linux-thread-multi/.packlist /usr/lib/firefox-1.5.0.4/.autoreg In this example, the files are valid files from Firefox (previous and current versions), Perl and the Qt GUI toolkit, but only the ".packlist" file is included in the main "perl" package. Creating and maintaining a simple white-list inside chkrootkit would bear the risk that a new rootkit uses the knowledge about white-listed file locations to store its malicious files. Also see: http://www.chkrootkit.org/faq/ Index: chkrootkit.spec =================================================================== RCS file: /cvs/extras/rpms/chkrootkit/FC-6/chkrootkit.spec,v retrieving revision 1.16 retrieving revision 1.17 diff -u -r1.16 -r1.17 --- chkrootkit.spec 20 Oct 2006 12:47:12 -0000 1.16 +++ chkrootkit.spec 31 Jan 2007 18:34:53 -0000 1.17 @@ -1,6 +1,6 @@ Name: chkrootkit Version: 0.47 -Release: 1%{?dist} +Release: 2%{?dist} Summary: Tool to locally check for signs of a rootkit Group: Applications/System License: BSD-like @@ -11,10 +11,12 @@ Source3: chkrootkit.desktop Source4: chkrootkit.console Source5: chkrootkit.pam +Source6: README.false_positives Patch1: chkrootkit-0.44-getCMD.patch Patch2: chkrootkit-0.44-inetd.patch Patch3: chkrootkit-0.45-includes.patch Patch4: chkrootkit-0.47-warnings.patch +Patch5: chkrootkit-0.47-no-openbsd.patch BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildRequires: desktop-file-utils @@ -42,6 +44,7 @@ %patch2 -p1 -b .inetd %patch3 -p1 -b .includes %patch4 -p1 -b .warnings +%patch5 -p1 -b .no-openbsd sed -i -e 's!\s\+(a)strip.*!!g' Makefile @@ -89,6 +92,8 @@ --add-category X-Fedora \ %{SOURCE3} +install -p %{SOURCE6} . + %clean rm -rf ${RPM_BUILD_ROOT} @@ -96,7 +101,7 @@ %files %defattr(-,root,root,-) -%doc ACKNOWLEDGMENTS COPYRIGHT README README.chklastlog README.chkwtmp chkrootkit.lsm +%doc ACKNOWLEDGMENTS COPYRIGHT README README.chklastlog README.chkwtmp chkrootkit.lsm README.false_positives %{_sbindir}/chkrootkit %{_bindir}/chkrootkit %{_bindir}/chkrootkitX @@ -108,13 +113,14 @@ %changelog +* Wed Jan 31 2007 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.47-2 +- Upstream wants to disable the OBSD rk v1 check on Linux with + next release. + * Fri Oct 20 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.47-1 - Update to 0.47. - mark PAM and consolehelper files in /etc as config -* Mon Aug 28 2006 Michael Schwendt <mschwendt[AT]users.sf.net> -- rebuilt - * Sat Feb 25 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.46a-2 - rebuilt for FC5

1 0

rpms/chkrootkit/FC-5 README.false_positives, NONE, 1.1 chkrootkit.spec, 1.15, 1.16
by fedora-extras-commits＠redhat.com 31 Jan '07

31 Jan '07

Author: mschwendt Update of /cvs/extras/rpms/chkrootkit/FC-5 In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv9087/FC-5 Modified Files: chkrootkit.spec Added Files: README.false_positives Log Message: * Wed Jan 31 2007 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.47-2 - Upstream wants to disable the OBSD rk v1 check on Linux with next release. --- NEW FILE README.false_positives --- This is an additional document added to the Fedora RPM package of chkrootkit. ----- It is in the nature of some of chkrootkit's checks that there may be some false positives among the reported findings. The chkrootkit user is advised to examine such files more closely (display them, query the RPM database about them, compare with backups on read-only media) and use another layer of protection (such as an intrusion detection tool). For example, where it is searched for hidden files below /usr/lib, which begin with a dot, chkrootkit may report files which belong into valid RPM packages, or which have been created at run-time by some software, and which are innocent. The output could look like this (the lines have been wrapped for readability): Searching for suspicious files and dirs, it may take a while... /usr/lib/firefox-1.5.0.3/.autoreg /usr/lib/firefox-1.5.0.2/.autoreg /usr/lib/firefox-1.5.0.8/.autoreg /usr/lib/firefox-1.5.0.1/.autoreg /usr/lib/qt-3.3/etc/settings/.qt_plugins_3.3rc.lock /usr/lib/qt-3.3/etc/settings/.qtrc.lock /usr/lib/firefox-1.5/.autoreg /usr/lib/perl5/5.8.8/i386-linux-thread-multi/.packlist /usr/lib/firefox-1.5.0.4/.autoreg In this example, the files are valid files from Firefox (previous and current versions), Perl and the Qt GUI toolkit, but only the ".packlist" file is included in the main "perl" package. Creating and maintaining a simple white-list inside chkrootkit would bear the risk that a new rootkit uses the knowledge about white-listed file locations to store its malicious files. Also see: http://www.chkrootkit.org/faq/ Index: chkrootkit.spec =================================================================== RCS file: /cvs/extras/rpms/chkrootkit/FC-5/chkrootkit.spec,v retrieving revision 1.15 retrieving revision 1.16 diff -u -r1.15 -r1.16 --- chkrootkit.spec 20 Oct 2006 12:51:26 -0000 1.15 +++ chkrootkit.spec 31 Jan 2007 18:34:52 -0000 1.16 @@ -1,6 +1,6 @@ Name: chkrootkit Version: 0.47 -Release: 1%{?dist} +Release: 2%{?dist} Summary: Tool to locally check for signs of a rootkit Group: Applications/System License: BSD-like @@ -11,10 +11,12 @@ Source3: chkrootkit.desktop Source4: chkrootkit.console Source5: chkrootkit.pam +Source6: README.false_positives Patch1: chkrootkit-0.44-getCMD.patch Patch2: chkrootkit-0.44-inetd.patch Patch3: chkrootkit-0.45-includes.patch Patch4: chkrootkit-0.47-warnings.patch +Patch5: chkrootkit-0.47-no-openbsd.patch BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildRequires: desktop-file-utils @@ -42,6 +44,7 @@ %patch2 -p1 -b .inetd %patch3 -p1 -b .includes %patch4 -p1 -b .warnings +%patch5 -p1 -b .no-openbsd sed -i -e 's!\s\+(a)strip.*!!g' Makefile @@ -89,6 +92,8 @@ --add-category X-Fedora \ %{SOURCE3} +install -p %{SOURCE6} . + %clean rm -rf ${RPM_BUILD_ROOT} @@ -96,7 +101,7 @@ %files %defattr(-,root,root,-) -%doc ACKNOWLEDGMENTS COPYRIGHT README README.chklastlog README.chkwtmp chkrootkit.lsm +%doc ACKNOWLEDGMENTS COPYRIGHT README README.chklastlog README.chkwtmp chkrootkit.lsm README.false_positives %{_sbindir}/chkrootkit %{_bindir}/chkrootkit %{_bindir}/chkrootkitX @@ -108,6 +113,10 @@ %changelog +* Wed Jan 31 2007 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.47-2 +- Upstream wants to disable the OBSD rk v1 check on Linux with + next release. + * Fri Oct 20 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.47-1 - Update to 0.47. - mark PAM and consolehelper files in /etc as config

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

scm-commits January 2007