rkhunter (for openSUSE)

# Rootkit Hunter scans files and systems for known and unknown rootkits,
# backdoors, and sniffers. The package contains one shell script, a few
# text-based databases, and optional Perl modules. This tool scans for
# rootkits, backdoors, and local exploits by running tests like:
#
# * Comparing MD5 hashes
#
# * Looking for default files used by rootkits
#
# * Checking for wrong file permissions for binaries
#
# * Looking for suspected strings in LKM and KLD modules
#
# * Looking for hidden files
#
# * Optionally scanning within plain text and binary files
#
# * Checking software versions
#
# * Testing applications
#
# Authors:
# --------
# Michael Boelen

-------------------------------------------------------------------
Wed Nov 17 13:56:58 UTC 2010 - saigkill@opensuse.org

- Updated to version 1.3.8

-------------------------------------------------------------------
Mon Nov 30 16:44:30 UTC 2009 - saigkill@opensuse.org

- updated to Version 1.3.6

-------------------------------------------------------------------
Mon Nov 30 16:42:06 UTC 2009 - saigkill@opensuse.org

- cleanup :

-------------------------------------------------------------------
Sat Jan 10 18:46:00 UTC 2009 - saigkill@opensuse.org - 1.3.4

- branched for OpenSUSE:Factory:contrib
- changed License to GPLv3
- changed Sourcecode from *.tar.gz to tar.bz2

-------------------------------------------------------------------
Wed Dec 31 00:00:00 CET 2008 - lrupp@suse.de - 1.3.4

- update to 1.3.4
+ The change log lists 4 additions, 8 changes and 9 bugfixes. Here are a few:
+ Added IntoXonia-NG rootkit check.
+ Added Phalanx2 rootkit check.
+ Added support for TCB shadow files.
+ The '--propupd' option can now take an optional file,
directory or package name after it.
+ Revised file properties inode check.
+ Improved the O/S name detection.
+ Improved hidden files and directories check.
+ Improved debug file option.

-------------------------------------------------------------------
Fri Nov 14 12:29:36 CET 2008 - lrupp@suse.de - 1.3.2

- added rkhunter-1.3.2-CVE-2008-4982.patch

-------------------------------------------------------------------
Tue Nov 4 10:31:05 CET 2008 - lars@linux-schulserver.de - 1.3.2

- added --no-mail-on-warning as option to the sysconfig and cronjob
to avoid double mails

-------------------------------------------------------------------
Mon Jun 30 15:01:42 CEST 2008 - lrupp@suse.de - 1.3.2

- added /dev/shm/pulse-shm to allowed dev files

-------------------------------------------------------------------
Mon May 26 15:09:19 CEST 2008 - lrupp@suse.de - 1.3.2

- allow users to disable SuSEconfig script via sysconfig file

-------------------------------------------------------------------
Thu May 8 13:24:38 CEST 2008 - lrupp@suse.de - 1.3.2

- remove the --propupd option from cron: makes more problems than
it solves
- add SuSEconfig.rkhunter instead if build in OBS
- update README.SuSE

-------------------------------------------------------------------
Tue May 6 12:31:43 CEST 2008 - lrupp@suse.de - 1.3.2

- fix typo in cronjob (bnc#384668)
- logrotate script is %config

-------------------------------------------------------------------
Mon Apr 28 18:10:37 CEST 2008 - lrupp@suse.de - 1.3.2

- allow /dev/shm/sysconfig/new-stamp-* files

-------------------------------------------------------------------
Tue Apr 8 12:12:50 CEST 2008 - lrupp@suse.de - 1.3.2

- fix typo in sysconfig file

-------------------------------------------------------------------
Thu Apr 3 19:41:37 CEST 2008 - lrupp@suse.de - 1.3.2

- update to 1.3.2:
The changelog lists 3 additions, 6 changes and 14 bugfixes.
Naming a few:
+ Socklog and rsyslog daemons support.
+ Application version check errors mostly ignored.
+ Unset ALLOW_SSH_ROOT_USER and ALLOW_SSH_PROT_V1.
+ Application check whitelisting.
+ Correct scanning of /dev in LAZY mode.
+ Whitelisted passwordless account names logged.
+ Corrected obtaining process names in Solaris.
+ Correct hidden files/directories test behaviour.
+ Cater for those using fdesc/fdescfs.

-------------------------------------------------------------------
Wed Feb 6 13:51:10 CET 2008 - lrupp@suse.de - 1.3.0

- update to 1.3.0:
- many new features
(needs testing)

-------------------------------------------------------------------
Wed Nov 28 17:17:47 CET 2007 - lrupp@suse.de - 1.2.9

- newdb.tar.bz2 updated
- rkhunter-10.3.patch adapted

-------------------------------------------------------------------
Fri Jun 01 17:31:19 CET 2007 - lrupp@suse.de - 1.2.9

- update to 1.29
- improved the cronjob
- added sysconfig file for cronjob
- add /var/log/rkhunter.log as %ghost
- add hashupd.sh to scripts directory

-------------------------------------------------------------------
Wed Nov 22 19:58:18 CET 2006 - meissner@suse.de - 1.2.8

- use correct string for i586. #223221

-------------------------------------------------------------------
Thu Nov 16 11:37:13 CET 2006 - meissner@suse.de - 1.2.8

- Detect openSUSE as product correctly. #216053
- renamed cron script to have "suse.de-" prefix.

-------------------------------------------------------------------
Tue Nov 7 16:51:10 CET 2006 - meissner@suse.de - 1.2.8

- Include the current database from upstream. #216053
- daily cron script to mode 755

-------------------------------------------------------------------
Wed Jul 19 14:44:03 CEST 2006 - meissner@suse.de - 1.2.8

- New version 1.2.8
- some hashes and version updated
- small fixes
- Added SUSE Linux 10 hashes

-------------------------------------------------------------------
Thu Mar 23 14:12:10 CET 2006 - meissner@suse.de - 1.2.7

- detect 10.1. #148471

-------------------------------------------------------------------
Wed Jan 25 21:47:41 CET 2006 - mls@suse.de - 1.2.7

- converted neededforbuild to BuildRequires

-------------------------------------------------------------------
Thu Dec 1 17:42:00 CET 2005 - meissner@suse.de - 1.2.7

- Order ALLOW* directives in the right section.
- Do not |mail in a cronjob, just let cron do it for itself.
- Quiet down output so it usually should not mail.
- Enable MAIL_ON_WARNING, send mail to root. #132683

-------------------------------------------------------------------
Wed Sep 7 10:40:53 CEST 2005 - meissner@suse.de - 1.2.7

- ignore /etc/.pwd.lock, /etc/.java too. #115128

-------------------------------------------------------------------
Thu Aug 18 17:06:56 CEST 2005 - meissner@suse.de - 1.2.7

- recognize 10.0, ignore /dev/.udevdb/.

-------------------------------------------------------------------
Fri Aug 12 14:08:55 CEST 2005 - meissner@suse.de - 1.2.7

- Use /usr/share/rkhunter instead of /usr/%_lib/rkhunter.
- Fixed some other problems.

-------------------------------------------------------------------
Mon Jul 11 18:16:41 CEST 2005 - meissner@suse.de - 1.2.7

- Initial import of rkhunter 1.2.7