chkrootkit (0.58b-6build1) resolute; urgency=medium

  * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)

 -- Sebastien Bacher <seb128@debian.org>  Fri, 06 Feb 2026 21:11:01 +0100

chkrootkit (0.58b-6) unstable; urgency=medium

  * Team upload
  * Update debian/patches/chklastlog.patch to fix compilation using gcc-15
    (Closes: #1096431)
  * Fix syntax error in debian/patches/chkproc.patch (should allow
    building on non-Linux platforms such as hurd-amd64)
  * Fix salsa pipeline (debian/test/find-debs-that-are-enhanced needed
    updating now that login is no longer essential, and because slogin was
    removed from debian)
  * Standards-Version: 4.7.2 (no changes needed)
  * autopkgtest minor cleanups:
     - refuse to run if $AUTOPKGTEST_TMP is not set (the tests should only
       be run in a chroot)
     - ensure temp files are cleaned up at the end (makes it easier to
       re-run in a chroot while debugging)
     - work if passwd is not installed (it is no longer Essential)
     - attempt to make the logic more robust in case other packages stop
       being essential in future
     - fix various indentation issues (using shfmt)
   * Replace old FSF address with URL in debian/copyright

 -- Richard Lewis <richard.lewis.debian@googlemail.com>  Fri, 26 Sep 2025 23:35:00 +0100

chkrootkit (0.58b-5) unstable; urgency=medium

  * Team upload

  [ Richard Lewis ]
  * Add binutils and procps to 'depends' (Thanks to Stephen Helma for
    spotting this). (Closes: #1107587)

 -- Richard Lewis <richard.lewis.debian@googlemail.com>  Sat, 14 Jun 2025 14:00:00 +0100

chkrootkit (0.58b-4) unstable; urgency=medium

  * Team upload

  [ Richard Lewis ]
  * Set ProtectSystem in the systemd unit to prevent tests modifying
    the access times of files that are examined. This ensures
    systemd-tmpfiles can continue to detect unused files in /tmp
    (Closes: #1089588)
  * Ensure the ldsopreload test can be run on its own
  * chkwtmp: prevent potential overflow in argument parsing
  * chkdirs: simplify code and improve message about unsupported
     fs: overlayfs is more likely to be the cause than btrfs
  * chkproc: fix detection of linux threads (prevents false positives),
     and improve output to show the command and systemd cgroup for
     suspicious pids
  * Refactor all debian patches to simplify upstreaming
  * Ensure everything compiles but does not silently
     do nothing on unsupported (non-linux) systems
  * Improve autopkgtests so they make less assumptions about being able to
     see network managers on the host (Closes: #1093596)

  [ Sven Geuer ]
  * Bump Debian copyright years

 -- Richard Lewis <richard.lewis.debian@googlemail.com>  Wed, 5 Feb 2025 18:00:00 +0000

chkrootkit (0.58b-3) unstable; urgency=medium

  [ Richard Lewis ]
  * Team upload
  * Fix autopkgtests on non-amd64 architectures
  * Update debian/copyright file, and run
     wrap-and-sort -stkb (thanks to Simon Josefson)

 -- Richard Lewis <richard.lewis.debian@googlemail.com>  Sun, 29 Sep 2024 20:50:00 +0100

chkrootkit (0.58b-2) unstable; urgency=medium

  [ Richard Lewis ]
  * Team upload
  * Flag whether files flagged as 'suspicious' are from
     Debian packages (Closes: #1053979, #1049411). Thanks to
     Alban Browaeys for suggesting this.
  * Allow -e to hide much more results (Closes: #1025257 - you can
    use wildcards thanks to Peter Gervai for the suggestion)
  * Fix -r to not skip several tests.
  * Allow running as non-root (although some tests will not work,
    but most will)
  * Document false positive from ansible (Closes: #1049411)
     and mosh (Closes: #1075883)
  * Ensure check of PHP files copes with files with quotes
     in their names (Closes: #1071377)
  * Ensure the systemd timer runs once every day, even if
     the system is suspended (Closes: #1035025, thanks to
     'richardn')
  * (new patch 87a,b) Improve output from ifpromisc: It will
     now set an exit code of 1 if anything was found, and no
     output will be produced if there are no siffers
     (Closes: #1035303)
  * Skip utmp check if no /var/run/utmp: systems with a 64-bit
     time_t may no longer have this file at all (Closes: #1080332).
  * Skip wtmp check if no /var/log/wtmp: systems with a 64-bit
     time_t may no longer have this file at all (Closes: #1082087).
  * Skip lastlog check if no /var/log/lastlog: systems with
     a 64-bit time_t may no longer have this file at all
     (also part of #1082087).
  * Drop patch 22: not actually needed
  * Improve man-page (Closes: #1070231)
  * Update patch 20: Use CCFLAGS when building check_wtmpx
     (avoids blhc(1) warning)
  * Standards-Version 4.7.0 (no changes needed)

 -- Richard Lewis <richard.lewis.debian@googlemail.com>  Tue, 13 Aug 2024 12:50:00 +0100

chkrootkit (0.58b-1) unstable; urgency=medium

  [ Richard Lewis ]
  * Team upload
  * New upstream release (0.58b)
    - new option '-T' to exclude files system mount
       points (from some checks)
    - new checks for BPF Door and Tsunami DDoS Malware
    - (includes fix from debian patch 79)
  * Document that anything creating executables in /tmp, including
     'apt source' can create false positives (Closes: #1004232)
  * Update metadata and debian/watch: upstream website
     now supports https and the download location has changed
  * Refresh patches, and make minor improvement to patch 27 to
     fix compilation on hurd-i386 (Closes: #1035086)

 -- Richard Lewis <richard.lewis.debian@googlemail.com>  Thu, 20 Jul 2023 18:29:00 +0100

chkrootkit (0.57-2) unstable; urgency=medium

  [ Richard Lewis ]
  * Team upload
  * Fix several tests that did not work, contained syntax errors or
     where the output did not make clear what had been found
     (and remove spurious file in /usr/lib/chkrootkit/1 created as a result,
     thanks to Thomas Dorner)
     (Closes: #1032122, #589682)
  * Update autopkgtests to avoid warnings from grep (Thanks to Seb35)
     (Closes: #1019460)
  * Add systemd timer (Closes: #745433 as you can change the time the unit runs)
  * Add NEWS.Debian to document disabled tests
  * All lintian warnings are now fixed or overridden

 -- Richard Lewis <richard.lewis.debian@googlemail.com>  Sun, 12 Mar 2023 12:31:00 +0100

chkrootkit (0.57-1) unstable; urgency=medium

  [ Seb35 ]
  * Downloading address changed

  [ Marcos Fouces ]
  * New upstream version 0.57
  * Refresh patches for new upstream release.
  * Bump to Standards-Version 4.6.2 (no changes needed).
  * Update d/copyright.

 -- Marcos Fouces <marcos@debian.org>  Thu, 09 Feb 2023 00:24:44 +0100

chkrootkit (0.55-4) unstable; urgency=medium

  [ Richard Lewis ]
  * Prevent autopkgtests failing on non-amd64 architectures due to
     differing output from the test for 'Linux/Ebury', which will
     only run on am64

  [ Marcos Fouces ]
  * Fix minor spelling errors spotted by Lintian.

 -- Marcos Fouces <marcos@debian.org>  Thu, 23 Dec 2021 18:12:03 +0100

chkrootkit (0.55-3) unstable; urgency=medium

  [ Richard Lewis ]
  * Prevent autopkgtests failing in lxc containers where root cannot
     read files in /dev (patch 61, 62)
  * Make test for T.R.K capable of reporting suspicious files (patch 63)

  [ Marcos Fouces ]
  * Fix minor spelling errors.

 -- Marcos Fouces <marcos@debian.org>  Wed, 08 Dec 2021 00:01:17 +0100

chkrootkit (0.55-2) unstable; urgency=medium

  [ Richard Lewis ]
  * Move configuration to /etc/chkrootkit/chkrootkit.conf and manage
    it as a conffile rather than via debconf
  * This enables various improvements to /etc/cron.daily/chkrootkit:
    - Improved default filtering and make filtering fully customisable
      (Closes: #630880, #666989, #669333, #677315, #877666, #488558).
    - run under ionice if possible (Closes: #745431)
  * Remove messages "OooPS, not expected" messages from
     chkproc by re-increasing MAX_PROCESSES to the upstream
     value (Closes: #982998) and preventing chkproc sending kill signals
     to processes to see if they might be malicious. (patches 55, 55a)
     This does re-disable a test for Enye LKM.
  * Prevent ckrootkit hanging when invoked from an LXC container
     (Closes: #872379), thanks to Scott Barker for identifying the issue
     (patch 61).
  * Various improvement to the output of chkrootkit
     - stop merging output of sniffer test into a single line so '-s'
       can be used as intended (patch 60)
     - fix the test of sshd so it runs when sshd is found
        instead of when it is not (patch 56)
     - ensure rexedcs tests produces any output when it finds
       something suspicious (patch 60)
     - ensure output lines up, especially if '-q' is not present
     - remove spurious spaces (patch 53, 54, 55a,57, 58)
     - do not list directories twice in list of 'suspicious' files (patch 59)
        and show output when -q not given (patch 25a)
     - fix spelling error in chkdirs output (patch 52)
     - further improvements to output of 'chkrootkit -h' (edits to
        patch 26, patch 26a)
  * Remove bashism from d/25_fix-nfs-legacy-sniffers.patch.
    (Closes: #994153).
  * Documentation copy-edited for grammar (and occaisional accuracy)
  * Update dependencies so that packages whose binaries are tested are listed
     in 'Enhances' and add iproute2 as a preferred alternative to net-tools
  * Update documentation of earlier patches (1-51), recording
     which have been sent upstream
  * Add some autopkgtests

  [ Marcos Fouces ]
  * Update copyright file.

 -- Marcos Fouces <marcos@debian.org>  Tue, 09 Nov 2021 22:44:33 +0100

chkrootkit (0.55-1) unstable; urgency=medium

  * New upstream version 0.55
  * Refresh all patches for new upstream release.
  * Bump to Standards-Version 4.6.0 (no changes needed).

 -- Marcos Fouces <marcos@debian.org>  Fri, 23 Jul 2021 00:01:21 +0200

chkrootkit (0.54-1) unstable; urgency=medium

  * New upstream release.
  * Refresh patches for new upstream release.
  * Bump to Standards-Version 4.5.1 (no changes needed).
  * Upgrade watch file uscan version to 4.
  * Update copyright dates.

 -- Marcos Fouces <marcos@debian.org>  Thu, 07 Jan 2021 08:53:34 +0100

chkrootkit (0.53-2) unstable; urgency=medium

  [ Debian Janitor ]
  * Fix day-of-week for changelog entries 0.31-2.

  [ Marcos Fouces ]
  * Change section of binary manpages from 1 to 8 as they are
    administrator tools.
  * Bump to Standards-Version: 4.5.0 (no changes required).
  * Add Rules-Requires-Root: no in d/control.
  * d/chkrootkit.cron.daily:
    ~ Remove outdated sed filtering based on old network
      interface name scheme.
    ~ Rename properly.
    ~ Redirect poperly chkrootkit stderr. (Closes: #934486).
    ~ Set exit status always to zero using " || true". (Closes: #943727)
  * d/chkrootkit.8:
    ~ Update and improve man page.
  * d/patches:
    ~ Add 25_fix-nfs-legacy-snifers.patch. (Closes: #580491, #548582, #919911).
    ~ Add 26_improve-info-help-display.patch. Add more info on "-e"
      and "-s" options (Closes: #586897).
    ~ Add 27_fix-race-condition-ps-proc.patch (Closes: #535942).
    ~ Fix 17_Suckitfalse.patch for non-systemd init systems. (Closes: #901557).
    ~ Refresh patches.
  * Update uploader email to @debian.org

  [ Christian Göttsche ]
  * Improve 27_fix-race-condition-ps-proc.patch
  * Add patches handling compiler and static analyzer issues
  * Add some default compiler warnings
  * Bump to debhelper compat level 13

 -- Marcos Fouces <marcos@debian.org>  Tue, 06 Oct 2020 23:08:55 +0200

chkrootkit (0.53-1) unstable; urgency=medium

  * New upstream version 0.53
  * Refresh patches for new upstream release.

 -- Marcos Fouces <marcos.fouces@gmail.com>  Fri, 19 Jul 2019 23:19:47 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog chkrootkit`.
