Package Details: chkboot 1.3-1

Git Clone URL: https://aur.archlinux.org/chkboot.git (read-only)
Package Base: chkboot
Description: Create hashes of all files under /boot and warns the user if they are modified
Upstream URL: https://github.com/grazzolini/chkboot
Keywords: boot check security
Licenses: GPL
Submitter: None
Maintainer: grazzolini
Last Packager: grazzolini
Votes: 13
Popularity: 0.026035
First Submitted: 2012-02-23 08:55
Last Updated: 2019-04-16 21:41

Dependencies (4)

Required by (0)

Sources (1)

Latest Comments

1 2 Next › Last »

DefaultSpatula commented on 2019-04-16 22:11

I appreciate you taking the time to update this package; thanks!

Notice to everyone: After updating to 1.3, chkboot will warn you about changed hashes. This is because the hashing algorithm has been updated to use SHA512.

grazzolini commented on 2019-04-15 16:51

@DefaultSpatula

I'm going through your PR's. But please, don't advise anyone on using then, specially the EFI one.

DefaultSpatula commented on 2019-04-13 15:05

A heads up for anyone trying to use this on an EFI system: Manually apply pull requests #9, #10, and #11 from github and it'll work perfectly.

Additionally, pull request #13 includes pacman hooks to automate the process when your boot images, systemd, or kernel microcode receive updates.

grazzolini commented on 2015-08-17 15:02

@noxp
You're right, this hook has some limitations, specially regarding the usage of a EFI system partition as /boot. I am currently planning a complete revamp of this hook, including a merge with https://aur.archlinux.org/packages/mkinitcpio-chkcryptoboot/

It shouldn't be difficult to add a special case for an EFI system partition, since the UEFI specification determines it must be a FAT filesystem. As for the disk head, it backups the MBR, which on GPT is the protective MBR. Unless you are creating your GPT without it. Right now it backups 512 bytes. But that also backups the partition table, on a MBR disk. If you change your partitioning, it would trigger a false positive chkboot warning.

noxpo commented on 2015-08-16 08:25

Thx for your great work man. My /boot is a FAT32 UEFI System partition on a disk with a GPT label. For this case, I have two suggestions:

1) The number of sectors of the stored disk head should be configurable, I use 34 to cover the entire GPT.

2) The inode and extent fileds in the boot file list don't make a lot of sense for a FAT filesystem, how about comparing the first x sectors of the partiton head holding the file allocation table?

grazzolini commented on 2015-05-04 04:38

@pezz
Expect it to be updated today, at most tomorrow. I still haven't fixed all the bugs chkboot-git had.

pezz commented on 2015-05-03 23:33

Would have been nice to have this updated before deleting chkboot-git.

pezz commented on 2014-02-07 00:29

This is great, nice work!

inhies commented on 2014-01-09 16:00

Updated the package version function, thank you sekret.

In the future if anyone else would like to suggest changes/improvements, I invite you to do so on Github at https://github.com/inhies/arch-packages/tree/master/chkboot-pkgbuild

Thanks!

sekret commented on 2013-12-30 10:44

Hi, could you please use another pkgver function, which increments after new releases? I for example use

pkgver() {
cd "$_pkgname"
echo "$(git log -1 --format="%cd" --date=short | sed 's|-||g').$(git rev-list --count master)"
}

which right now produces

$ pacman -Qi chkboot-git | grep Version
Version : 20131209.22-1