diff options
Diffstat (limited to 'app-forensics/chkrootkit/chkrootkit-0.55-r1.ebuild')
-rw-r--r-- | app-forensics/chkrootkit/chkrootkit-0.55-r1.ebuild | 68 |
1 files changed, 68 insertions, 0 deletions
diff --git a/app-forensics/chkrootkit/chkrootkit-0.55-r1.ebuild b/app-forensics/chkrootkit/chkrootkit-0.55-r1.ebuild new file mode 100644 index 000000000000..03cfffb6ef30 --- /dev/null +++ b/app-forensics/chkrootkit/chkrootkit-0.55-r1.ebuild @@ -0,0 +1,68 @@ +# Copyright 2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +inherit systemd toolchain-funcs + +GENTOO_PATCH="${PN}-0.55-gentoo.patch" + +DESCRIPTION="Tool to locally check for signs of a rootkit" +HOMEPAGE="http://www.chkrootkit.org/" +SRC_URI="ftp://ftp.pangeia.com.br/pub/seg/pac/${P}.tar.gz" +SRC_URI+=" https://dev.gentoo.org/~sam/distfiles/${CATEGORY}/${PN}/${GENTOO_PATCH}.bz2" + +LICENSE="BSD-2" +SLOT="0" +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~mips ~ppc ~ppc64 ~s390 ~sparc ~x86" +IUSE="+cron systemd" + +DEPEND="systemd? ( sys-apps/systemd )" +RDEPEND="${DEPEND} + cron? ( virtual/cron )" + +PATCHES=( + "${WORKDIR}/${GENTOO_PATCH}" + "${FILESDIR}/${P}-fcntl_h.patch" + "${FILESDIR}/${P}-limits_h.patch" +) + +src_prepare() { + default + sed -e 's:/var/adm/:/var/log/:g' \ + -i chklastlog.c || die +} + +src_compile() { + emake CC="$(tc-getCC)" STRIP=true sense +} + +src_install() { + dosbin chkdirs chklastlog chkproc chkrootkit chkwtmp chkutmp ifpromisc strings-static + dodoc ACKNOWLEDGMENTS README* + + if use cron ; then + exeinto /etc/cron.weekly + newexe "${FILESDIR}"/${PN}.cron ${PN} + fi + systemd_dounit "${FILESDIR}/${PN}.timer" "${FILESDIR}/${PN}.service" +} + +pkg_postinst() { + if use cron ; then + elog + elog "Edit /etc/cron.weekly/chkrootkit to activate chkrootkit!" + elog + fi + if use systemd ; then + elog + elog "To enable the systemd timer, run the following command:" + elog " systemctl enable --now chkrootkit.timer" + elog + fi + elog + elog "Some applications, such as portsentry, will cause chkrootkit" + elog "to produce false positives. Read the chkrootkit FAQ at" + elog "http://www.chkrootkit.org/ for more information." + elog +} |