[gentoo-commits] repo/gentoo:master commit in: app-forensics/chkrootkit/

["Florian Schmaus" <flow@gentoo.org>]

commit:     0bf49aeaaa868939f3b153ed03c2e4cfbde0e66f
Author:     Martin Dummer <martin.dummer <AT> gmx <DOT> net>
AuthorDate: Mon Jun  3 21:54:58 2024 +0000
Commit:     Florian Schmaus <flow <AT> gentoo <DOT> org>
CommitDate: Fri Jun  7 07:35:47 2024 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=0bf49aea

app-forensics/chkrootkit: add 0.58b

Closes: https://bugs.gentoo.org/910173
Signed-off-by: Martin Dummer <martin.dummer <AT> gmx.net>
Closes: https://github.com/gentoo/gentoo/pull/37013
Signed-off-by: Florian Schmaus <flow <AT> gentoo.org>

 app-forensics/chkrootkit/Manifest                |  2 +
 app-forensics/chkrootkit/chkrootkit-0.58b.ebuild | 70 ++++++++++++++++++++++++
 2 files changed, 72 insertions(+)

diff --git a/app-forensics/chkrootkit/Manifest b/app-forensics/chkrootkit/Manifest
index 4e48504fea13..de1145cd3898 100644
--- a/app-forensics/chkrootkit/Manifest
+++ b/app-forensics/chkrootkit/Manifest
@@ -1,2 +1,4 @@
 DIST chkrootkit-0.57-gentoo.patch.bz2 5143 BLAKE2B 2b6018881b12121d6317f45d1b761a0b27e13bcfe4d936a468a13968357039419bb85650a4e0aa85f475226cd196fc17d3bac1222dc5be39f715c3d01a64b8a6 SHA512 21a389bfe1fc838cbf527db107ac7081ad61a90da04ab96d7a1bdd352f1e40745b0a5e31559fde7ff8f4214718510a281f9eb67de38df33f13b9ac2e3c640251
 DIST chkrootkit-0.57.tar.gz 41948 BLAKE2B b75bec7e5f582aad363c84308c57de9881facf0176ef8c32adcdffdb04182f248b1dcc40b6df439bb9014580383b7f43e7503877098e8ecba6740c21b46b23a1 SHA512 ff35f01042bc68bdd10c4e26dbde7af7127768442c7a10f114260188dcc7e357e2c48d157c0b83b99e2fd465db3ed3933c84ae12fa411c5c28f64b955e742ff7
+DIST chkrootkit-0.58b-gentoo.patch.bz2 5067 BLAKE2B f1690d72f40269429e437c4ea407e0edbb080b760457a85cfd0c32843f69dc7ecdada795545c390887658a34504243cb8a814f082da85fd78eb3c3e9a99f485f SHA512 266b981304fe129117cb11c304a44f39e2c76c9acc634e6aa5a6654ac7ea76480950652b80378e43cab57a3993d3a0c11b413c9b9e9699924f9b44f6f50a9ec1
+DIST chkrootkit-0.58b.tar.gz 42957 BLAKE2B 92a17d9bb01e2c713791404568a1a625138d2ccd898f2624b1e076dd7d29d6a9154013f6408ffdcf1a5e2cea7236d3c218849ee732dd89f53e1f121cd560d342 SHA512 50829446aa5a320ef3aa678c7bbc03ba2ebc14dca3b4c1f312fb46d3d8206345628d2e94b99cfea33e0d3971afbc025dbd387fb32c4e1135a7466c20eb3afab2

diff --git a/app-forensics/chkrootkit/chkrootkit-0.58b.ebuild b/app-forensics/chkrootkit/chkrootkit-0.58b.ebuild
new file mode 100644
index 000000000000..cbb0f3549958
--- /dev/null
+++ b/app-forensics/chkrootkit/chkrootkit-0.58b.ebuild
@@ -0,0 +1,70 @@
+# Copyright 2022-2024 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+inherit systemd toolchain-funcs
+
+GENTOO_PATCH="${P}-gentoo.patch"
+
+DESCRIPTION="Tool to locally check for signs of a rootkit"
+HOMEPAGE="https://www.chkrootkit.org/"
+SRC_URI="ftp://ftp.chkrootkit.org/pub/seg/pac/${P}.tar.gz
+	https://md11.it.cx/download/${PN}/${GENTOO_PATCH}.bz2"
+
+LICENSE="BSD-2"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~mips ~ppc ~ppc64 ~s390 ~sparc ~x86"
+IUSE="+cron"
+
+RDEPEND="cron? ( virtual/cron )"
+
+PATCHES=(
+	"${WORKDIR}/${P}-gentoo.patch"
+	"${FILESDIR}/${PN}-0.55-fcntl_h.patch"
+	"${FILESDIR}/${PN}-0.55-limits_h.patch"
+)
+
+src_prepare() {
+	default
+
+	sed -e 's:/var/adm/:/var/log/:g' \
+		-i chklastlog.c || die
+}
+
+src_compile() {
+	emake CC="$(tc-getCC)" STRIP=/bin/true sense
+}
+
+src_install() {
+	dosbin chkdirs chklastlog chkproc chkrootkit chkwtmp chkutmp ifpromisc strings-static
+	dodoc ACKNOWLEDGMENTS README*
+
+	if use cron ; then
+		exeinto /etc/cron.weekly
+		newexe "${FILESDIR}"/${PN}.cron ${PN}
+	fi
+
+	systemd_dounit "${FILESDIR}/${PN}.timer" "${FILESDIR}/${PN}.service"
+}
+
+pkg_postinst() {
+	if use cron ; then
+		elog
+		elog "Edit ${EROOT}/etc/cron.weekly/chkrootkit to activate chkrootkit!"
+		elog
+	fi
+
+	if systemd_is_booted || has_version sys-apps/systemd ; then
+		elog
+		elog "To enable the systemd timer, run the following command:"
+		elog "   systemctl enable --now chkrootkit.timer"
+		elog
+	fi
+
+	elog
+	elog "Some applications, such as portsentry, will cause chkrootkit"
+	elog "to produce false positives.  Read the chkrootkit FAQ at"
+	elog "http://www.chkrootkit.org/ for more information."
+	elog
+}