rkhunter Rootkit detection tool
1.4.4 security =31

Maintainer: lukasz@wasikowski.net
Port Added: 15 May 2004 14:01:40
License: GPLv2+

Rootkit Hunter is scanning tool to ensure you for about 99.9% you're
clean of nasty tools.

This tool scans for rootkits, backdoors and local exploits by running
tests like:

- MD5/SHA1 hash compare
- Look for default files used by rootkits
- Wrong file permissions for binaries
- Look for suspected strings in LKM and KLD modules
- Look for hidden files
- Optional scan within plaintext and binary files

WWW: http://rkhunter.sourceforge.net

SVNWeb : Homepage : PortsMon

---

To install the port: cd /usr/ports/security/rkhunter/ && make install clean
To add the package: pkg install rkhunter

PKGNAME: rkhunter

distinfo:

TIMESTAMP = 1499895990
SHA256 (rkhunter-1.4.4.tar.gz) = a8807c83f9f325312df05aa215fa75ad697c7a16163175363c2066baa26dda77
SIZE (rkhunter-1.4.4.tar.gz) = 297626

---

NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.

Build dependencies:

1. perl5>=5.24<5.25 : lang/perl5.24

Runtime dependencies:

1. p5-Digest-SHA1>=0 : security/p5-Digest-SHA1
2. lsof : sysutils/lsof
3. perl5>=5.24<5.25 : lang/perl5.24

There are no ports dependent upon this port

---

Configuration Options

===> The following configuration options are available for rkhunter-1.4.4:
     DOCS=on: Build and/or install documentation
     LSOF=on: LiSt Open Files utility support
     NMAP=off: NMAP security scanning support
===> Use 'make config' to modify these settings

---

USES:

perl5 shebangfix

---

pkg-message:

******************************************************************************

You should keep your rkhunter database up-to-date.
This can be done automatically by putting this line to periodic.conf(5) files:

daily_rkhunter_update_enable="YES"
daily_rkhunter_update_flags="--update --nocolors"

Also, you can run rkhunter as a part of the daily security check by
putting this line to periodic.conf(5) files:

daily_rkhunter_check_enable="YES"
daily_rkhunter_check_flags="--checkall --nocolors --skip-keypress"

******************************************************************************

---

Master Sites:

1. http://cytranet.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
2. http://downloads.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
3. http://dronedata.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
4. http://excellmedia.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
5. http://freefr.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
6. http://jaist.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
7. http://kent.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
8. http://liquidtelecom.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
9. http://nchc.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
10. http://netassist.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
11. http://netcologne.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
12. http://netix.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
13. http://superb-dca2.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
14. http://superb-sea2.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
15. http://tenet.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
16. http://ufpr.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
17. http://vorboss.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
18. https://cytranet.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
19. https://downloads.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
20. https://dronedata.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
21. https://excellmedia.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
22. https://freefr.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
23. https://jaist.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
24. https://kent.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
25. https://liquidtelecom.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
26. https://nchc.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
27. https://netassist.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
28. https://netcologne.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
29. https://netix.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
30. https://superb-dca2.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
31. https://superb-sea2.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
32. https://tenet.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
33. https://ufpr.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/
34. https://vorboss.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.4/

security/rkhunter: Update to 1.4.4

While here, improve LICENSE

Changes:	http://rkhunter.cvs.sourceforge.net/viewvc/rkhunter/rkhunter/files/CHANGELOG

PR:		220765
Submitted by:	Lukasz Wasikowski <lukasz@wasikowski.net> (maintainer)
Approved by:	garga (mentor, implicit)

* Add fetch function to rkhunter
* Remove wget as a dependency
* Added NO_ARCH
* Fixed portlint items

PR:		219825
Submitted by:	Helge Oldach <freebsd@oldach.net>
Reviewed by:	matthew (mentor)
Approved by:	Lukasz Wasikowski <lukasz@wasikowski.net> (maintainer), matthew
(mentor)
Differential Revision:	https://reviews.freebsd.org/D11168

Use anticongestion in security/rkhunter

Introduced in src r316342, the anticongestion feature unifies multiple periodic
scripts' disparate sleeps.

PR:		218446
Submitted by:	lukasz@wasikowski.net
Reported by:	asomers
Reviewed by:	asomers
Approved by:	Lukasz Wasikowski <lukasz@wasikowski.net> (maintainer)
Approved by:	brd (ports)

When there is a do-install target, do not use a post-install target, do
everything at once.  Sometime, rename post-install into a options helper
target.

I did not fix ports that were such a mess that I could not figure out
what they really wanted to do.  I also did not change ports that had
some version of an auto-plist code in post-install, for the same reason.

With hat:	portmgr
Sponsored by:	Absolight

Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight

- Fix shebangs

Approved by:	portmgr blanket
MFH:		2015Q3 (blanket)

Cleanup plist

- unbreak
- added some FreeBSD defaults regarding SSH
- made port more PREFIX aware
- changed maintainer

PR:		191842
Submitted by:	Gerard J. Cerchio and Lukasz Wasikowski (maintainer)

- Reset maintainership

1.4.0 was unfetchable and the website advises everyone to
"upgrade real soon now." So, update the port to 1.4.2.

Also, STAGE support, options helpers, @sample, etc.

- Fix checksum mismatch problem during updates by installing signatures as
sample

PR:		ports/182789
Submitted by:	pirzyk

Fix properties on pkg-plist

Add NO_STAGE all over the place in preparation for the staging support (cat:
security)

Convert to new perl framework
Convert USE_GMAKE to USES=gmake

- Convert to new option framework

- Update to 1.4.0
- Make portlint happy

- Remove SITE_PERL from *_DEPENDS

Approved by: portmgr@ (bapt@)

- Install sample configuration file
- Add LICENSE

PR:             ports/153024
Submitted by:   Trond Endrestøl <Trond.Endrestol at ximalas.info>
Approved by:    jadawin@ (mentor)

Update my MAINTAINER address to sbz at FreeBSD.org.

Approved by:    jadawin@ (mentor)

Remove former maintainer from pkg-desr at their request

Feature safe:   yes

- Really give maintainership to Sofian Brabez.

Pointyhat to:   jadawin@ (myself)

- Update to 1.3.8
- Submitter is now maintainer

PR:             ports/152607
Submitted by:   Sofian Brabez <sbrabez AT gmail.com>

- Update to 1.3.6 [1]

PR:             ports/142962
Submitted by:   Sergiy Borodych <bor univ.kiev.ua>
[1] Done by:    jadawin@ (myself)

- Pass maintainership to jadawin

- Fix build

Reported by:    pavbot

- Fix warning output

PR:             132541
Submitted by:   Lukasz Wasikowski <lukasz@wasikowski.net>

- Update to 1.3.4
- Take over maintainership

Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)

- Update to 1.3.2

PR:             123204
Submitted by:   Lukasz Wasikowski <lukasz@wasikowski.net>
Approved by:    maintainer implicit

* Use the option --nocolors to make daily report pretty.
* Remove the option --cronjob to show the result in daily report.

PR:             119130
Submitted by:   Yi-Huan Chan <yhchan@csie.nctu.edu.tw>
Approved by:    maintainer via mail

- Update to 1.3.0

PR:             117269
Submitted by:   Philippe Audeoud <jadawin@tuxaco.net>
Approved by:    maintainer implicit

- Updatet to 1.2.9

Approved by:    maintainer (implicit)

Change my email address to farrokhi@ in all ports that I maintain.
Approved by:    miwi (mentor)

- Update mastersite.
- Pass maintainership to submitter.

PR:             ports/102933
Submitted by:   Babak Farrokhi <babak@farrokhi.net>

- Add periodic script to ease the maintenance
- Bump PORTREVISION

PR:             102968
Submitted by:   Gabor Kovesdan <gabor@FreeBSD.org>

Reset inactive maintainer who has not responded to email.

Hat:            portmgr

Now builds on sparc64

Approved by:    maintainer timeout (7+ weeks)

- Add OPTIONS for nmap (default on) and lsof (default off) RUN_DEPENDs for
additional checks
- bump portrevision

PR:             ports/99432
Submitted by:   Babak Farrokhi <babak@farrokhi.net>
Approved by:    maintianer timeout

- Preserv .conf file.
- Bump PORTREVISION

PR:             95553
Reported by:    Torfinn Ingolfsen <torfinn.ingolfsen___broadpark.no>
Approved by:    maintainer timeout (19 days)

- Update to 1.2.8
- Pacify portlint

PR:             93340
Submitted by:   Babak Farrokhi <babak@farrokhi.net>
Approved by:    vaidab <vaidab@Safe-mail.net> (maintainer)

SHA256ify

Approved by: krion@

update port security/rkhunter

        - Removed an obselete patch
        - Add pkg-message to show database update notice

PR:             ports/90737
Submitted by:   Babak Farrokhi <babak@farrokhi.net>

Change maintainer's email

PR:             88352
Submitted by:   vaidab <vaidab@phenix.rootshell.be> (maintainer)

Add support for FreeBSD 5.4.

PR:             82370
Submitted by:   Babak Farrokhi <babak (at) farrokhi.net>
Approved by:    maintainer time-out (> 15 days)

Fix dependency and remove the ancient pkg-message.

PR:             82336
Submitted by:   Babak Farrokhi <babak (at) farrokhi.net>
Approved by:    maintainer time-out (> 15 days)

Change MAINTAINER email back from babak@farrokhi.net to
vaidab@safe-mail.net. This was mistakenly changed during
yesterdays patch.

Approved by:    nectar (mentor)

Upgrade to version 1.2.7

PR:             ports/82193
Submitted by:   Babak Farrokhi
Approved by:    nectar (mentor)

Update to 1.2.3

Submitted by:   maintainer
PR:             ports/79149

BROKEN on sparc64: Does not build

Approved by:    portmgr (self)

- Update to 1.1.9

PR:             ports/76699
Submitted by:   bugghy <vaidab@safe-mail.net> (maintainer)

Update to 1.1.8.

Note to maintainer: your mailer is apparently changing tabs to spaces.
For short patches like this, it's possible to work around it; for
longer patches, it won't work at all.

PR:             ports/71680
Submitted by:   bugghy <bugghy at rootshell dot be> ( maintainer)

- Update to 1.1.7

PR:             ports/71119
Submitted by:   bugghy <bugghy@rootshell.be> (maintainer)

Upgrade to 1.1.4.

PR:             ports/70149
Submitted by:   maintainer.

. Add support for FreeBSD 4.10.

PR:             69614
Submitted by:   Yonatan <yonatan@xpert.com>

- Update to 1.1.3

PR:             ports/69574
Submitted by:   bugghy <bugghy@rootshell.be>

Add rkhunter 1.0.8,

Rootkit Hunter is scanning tool to ensure you for about 99.9%
you're clean of nasty tools.

This tool scans for rootkits, backdoors and local exploits by
running tests like:

- MD5/SHA1 hash compare
- Look for default files used by rootkits
- Wrong file permissions for binaries
- Look for suspected strings in LKM and KLD modules
- Look for hidden files
- Optional scan within plaintext and binary files

PR:             ports/66660
Submitted by:   Radim Kolar <hsn at netmag dot cz>

12 vulnerabilities affecting 45 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities