Package Details: chkrootkit 0.58b-1

Git Clone URL: https://aur.archlinux.org/chkrootkit.git (read-only, click to copy)
Package Base: chkrootkit
Description: Locally checks for signs of a rootkit
Upstream URL: http://www.chkrootkit.org/
Keywords: security
Licenses: custom
Submitter: sanerb
Maintainer: Maxr
Last Packager: Maxr
Votes: 11
Popularity: 0.24
First Submitted: 2019-08-20 16:00 (UTC)
Last Updated: 2024-03-08 12:45 (UTC)

Dependencies (1)

  • tigerAUR (optional) – a wrapper for chkrootkit

Required by (0)

Sources (1)

Latest Comments

marmis commented on 2025-09-21 09:07 (UTC) (edited on 2025-09-21 09:07 (UTC) by marmis)

Not sure if you want to patch it, but here are some fixes:

0001-fix-GCC-15-build.patch
From: Tiago de Paula <tiagodepalves@gmail.com>
Date: Sun, 21 Sep 2025 05:52:20 -0300
Subject: [PATCH 1/2] fix: GCC 15 build

---
 chklastlog.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/chklastlog.c b/chklastlog.c
index ade198d..5748795 100644
--- a/chklastlog.c
+++ b/chklastlog.c
@@ -77,7 +77,7 @@ int main () { return 0; }
 long total_wtmp_bytes_read=0;
 size_t wtmp_file_size;
 uid_t *uid;
-void read_status();
+void read_status(int signo);

 struct s_localpwd {
      int numentries;
@@ -213,7 +213,7 @@ int nonuser(struct utmp utmp_ent)
 }
 #endif

-void read_status() {
+void read_status(int signo) {
    double remaining_time;
    static long last_total_bytes_read=0;
    int diff;
-- 
2.51.0
0002-fix-reading-uninitialized-memory.patch
From: Tiago de Paula <tiagodepalves@gmail.com>
Date: Sun, 21 Sep 2025 05:52:55 -0300
Subject: [PATCH 2/2] fix: reading uninitialized memory

---
 chklastlog.c | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/chklastlog.c b/chklastlog.c
index 5748795..555f16e 100644
--- a/chklastlog.c
+++ b/chklastlog.c
@@ -108,25 +108,27 @@ int main(int argc, char*argv[]) {
    struct s_localpwd   *localpwd;
    uid_t       *uid;
         char wtmpfile[128], lastlogfile[128];
+        memset(wtmpfile, '\0', 128);
+        memset(lastlogfile, '\0', 128);

-        memcpy(wtmpfile, WTMP_FILENAME, 127);
-        memcpy(lastlogfile, LASTLOG_FILENAME, 127);
+        strncpy(wtmpfile, WTMP_FILENAME, 127);
+        strncpy(lastlogfile, LASTLOG_FILENAME, 127);

         while (--argc && ++argv) /* poor man getopt */
         {
-           if (!memcmp("-f", *argv, 2))
+           if (!strncmp("-f", *argv, 2))
            {
               if (!--argc)
                  break;
               ++argv;
-              memcpy(wtmpfile, *argv, 127);
+              strncpy(wtmpfile, *argv, 127);
            }
-           else if (!memcmp("-l", *argv, 2))
+           else if (!strncmp("-l", *argv, 2))
            {
               if (!--argc)
                  break;
               ++argv;
-              memcpy(lastlogfile, *argv, 127);
+              strncpy(lastlogfile, *argv, 127);
            }
         }

-- 
2.51.0

marty1885 commented on 2023-01-23 01:21 (UTC)

I can't update the package to 0.56 since the last week. Both chkrootkit.org and ftp.ckrootkit.org can be connected but does not download

i.further commented on 2022-12-30 14:27 (UTC)

The link should update to ftp://chkrootkit.org/pub/seg/pac/.

idanka commented on 2022-10-18 11:43 (UTC) (edited on 2022-10-18 11:48 (UTC) by idanka)

Build error
url: (6) Could not resolve host: ftp.pangeia.com.br
Warning: Problem : timeout. Will retry in 3 seconds. 3 retries left.
New downloads url/file name or misssing file?: ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz

antemyste commented on 2022-07-09 23:59 (UTC)

The package download link is back online: ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit-0.55.tar.gz

june3474 commented on 2021-11-07 08:57 (UTC)

The paths of external tools such as 'strings-static' are erroneous. For example, 'string-static' is installed in /lib/chkrootkit; and chkrootkit tries to executes './strings-static'; which ends up with an error saying "can't exec ./strings-static" unless chkrootkit is run in /lib/chkrootkit.

I wrote a patch but I don't know how to upload it.

thx.

Ralf_Mardorf commented on 2020-09-10 08:09 (UTC)

You need to import the public key.

gpg --keyserver hkp://keys.gnupg.net --recv-keys 748231EBCBD808A14F5E85D28C004C2F93481F6B

waasl commented on 2020-09-10 07:44 (UTC)

failed to install; One or more PGP signatures could not be verified!

sanerb commented on 2019-08-23 15:33 (UTC)

@Ralf_Mardorf

D'OH. shoot. thanks! fixed. how embarrassing; i don't know what i was thinking!

Ralf_Mardorf commented on 2019-08-23 11:48 (UTC)

The package does install /chkrootkit/usr/share/, IOW chkrootkit/ is in the root directory.