Hello, New version is out!
Created attachment 140785 [details, diff] chkrootkit-0.48.ebuild.diff
Created attachment 140790 [details, diff] chkrootkit-0.48-gentoo.diff
Created attachment 149469 [details, diff] bugfixes; make reports ease to read Patch changes: - fix: failed to execute chkdirs - fix: incorrectly detect crontab for nobody (at least for dcron) - improvement: don't include in report 1. empty files 2. .packlist files (huge amount of such files in /usr/lib/perl/ make chkrootkit reports nearly unreadable and so useless!) 3. /usr/lib/nessus/plugins/.desc/ directory 4. duplicate directories Actually only questionable change is exclude .packlist files. I think it's better to miss possible malicious files with this name than ignore chkrootkit reports at all because they are huge and unreadable. But perl's .packlist files have well-defined format, so it's ease to check their content if needed (but this may slowdown chkrootkit).
It's been half a year now, can anybody expect an update in the near future?
Was added to the tree. "improvement: don't include in report" was dropped, see my mail for discussion. Fixed.
