dot-files in system path /usr/lib trigger chkrootkit warnings

Bug #833768 reported by Aaron Haviland on 2011-08-25
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
byobu
Wishlist
Dustin Kirkland 
byobu (Ubuntu)
Wishlist
Dustin Kirkland 
Oneiric
Wishlist
Unassigned
Precise
Wishlist
Dustin Kirkland 

Bug Description

After installing byobu, I get the following output from chkrootkit:

Searching for suspicious files and dirs, it may take a while... The following suspicious files and directories were found:
/usr/lib/byobu/.constants /usr/lib/byobu/.common /usr/lib/byobu/.dirs /usr/lib/byobu/.shutil /usr/lib/byobu/.notify_osd

Can these be renamed so as not to trigger a false positive?

byobu:
  Installed: 4.31-0ubuntu1~ppa3
  Candidate: 4.31-0ubuntu1~ppa3
  Version table:
 *** 4.31-0ubuntu1~ppa3 0
        500 http://ppa.launchpad.net/byobu/ppa/ubuntu/ maverick/main amd64 Packages
        100 /var/lib/dpkg/status
     3.5-0ubuntu1 0
        500 http://us.archive.ubuntu.com/ubuntu/ maverick/main amd64 Packages
chkrootkit:
  Installed: 0.49-4
  Candidate: 0.49-4
  Version table:
 *** 0.49-4 0
        500 http://us.archive.ubuntu.com/ubuntu/ maverick/main amd64 Packages
        100 /var/lib/dpkg/status

Changed in byobu:
importance: Undecided → Wishlist
status: New → Confirmed
Dustin Kirkland  (kirkland) wrote :

Hi Aaron, thanks for the report. I need to think about how to fix this. These files are "hidden" files in that they're helpers to be used by the status scripts in /usr/lib/byobu. I will probably need to add 2 directories under there:
  - /usr/lib/byobu/status/*
  - /usr/lib/byobu/lib/*
or something like that.

I'll need to give this some thought so that upgrades proceed cleanly. I won't be able to fix this for 11.10, but will try to get it cleaned up for 12.04. Thanks.

Changed in byobu (Ubuntu Oneiric):
status: New → Won't Fix
importance: Undecided → Wishlist
Changed in byobu:
status: Confirmed → Triaged
Changed in byobu (Ubuntu):
status: New → Confirmed
Changed in byobu (Ubuntu):
importance: Undecided → Wishlist
Changed in byobu:
status: Triaged → In Progress
Changed in byobu (Ubuntu Precise):
status: Triaged → In Progress
Changed in byobu:
assignee: nobody → Dustin Kirkland (kirkland)
Changed in byobu (Ubuntu Precise):
assignee: nobody → Dustin Kirkland (kirkland)
Changed in byobu:
status: In Progress → Fix Committed
Changed in byobu (Ubuntu Precise):
status: In Progress → Fix Committed
Changed in byobu:
status: Fix Committed → Fix Released
Launchpad Janitor (janitor) wrote :
Download full text (4.6 KiB)

This bug was fixed in the package byobu - 4.47-0ubuntu1

---------------
byobu (4.47-0ubuntu1) precise; urgency=low

  * etc/profile.d/Z97-byobu.sh:
    - remove unnecessary 'true'
  * usr/share/byobu/ec2/Makefile.am, usr/share/byobu/ec2/rates.ap-
    northeast-1, usr/share/byobu/ec2/rates.ap-southeast-1,
    usr/share/byobu/ec2/rates.eu-west-1, usr/share/byobu/ec2/rates.us-
    east-1, usr/share/byobu/ec2/rates.us-west-1,
    usr/share/byobu/ec2/rates.us-west-2: LP: #888196
    - added new us-west-2 (Oregon) pricing region
  * close LP: #888106, fixed in last release
  * usr/share/byobu/profiles/tmux, usr/share/doc/byobu/help.tmux.txt,
    usr/share/doc/byobu/Makefile.am:
    - add a tmux keybinding help screen, bind to Shift-F1
  * usr/share/byobu/profiles/tmux, usr/share/doc/byobu/help.tmux.txt:
    - add a keybinding Ctrl-Shift-F2 to create a new session
  * usr/share/byobu/profiles/tmux:
    - rearrange to match help text; would be good to keep these
      coordinated
  * usr/share/byobu/profiles/tmux, usr/share/doc/byobu/help.tmux.txt:
    - Alt-F11 breaks split into new window
    - Shift-F11 puts window into a horizontal split in previous window
    - Ctrl-F11 puts window into a vertical split in previous window
  * usr/share/doc/byobu/help.tmux.txt:
    - fix typo
  * usr/share/byobu/keybindings/f-keys.tmux,
    usr/share/byobu/keybindings/f-keys.tmux.disable,
    usr/share/byobu/keybindings/Makefile.am,
    usr/share/byobu/profiles/tmux, usr/share/doc/byobu/help.tmux.txt:
    - LP: #888247
    - Add Shift-F12 to toggle keybindings on/off
    - Split tmux keybindings to separate file to source
  * usr/bin/byobu-status-detail, usr/lib/byobu/.constants,
    usr/share/byobu/keybindings/f-keys.tmux:
    - set a BYOBU_PAGER environment variable
    - use BYOBU_PAGER in places we need a pager
  * === added directory usr/lib/byobu/include, experimental/byobu-
    classroom, usr/bin/byobu, usr/bin/byobu-ctrl-a, usr/bin/byobu-
    disable, usr/bin/byobu-enable, usr/bin/byobu-export, usr/bin/byobu-
    janitor, usr/bin/byobu-launch, usr/bin/byobu-launcher,
    usr/bin/byobu-launcher-install, usr/bin/byobu-launcher-uninstall,
    usr/bin/byobu-quiet, usr/bin/byobu-reconnect-sockets, usr/bin/byobu-
    select-backend, usr/bin/byobu-select-profile, usr/bin/byobu-shell,
    usr/bin/byobu-silent, usr/bin/byobu-status, usr/bin/byobu-status-
    detail, usr/bin/byobu-ugraph, usr/bin/byobu-ulevel,
    usr/lib/byobu/.common => usr/lib/byobu/include/common (properties
    changed: -x to +x), usr/lib/byobu/.constants =>
    usr/lib/byobu/include/constants, usr/lib/byobu/.dirs =>
    usr/lib/byobu/include/dirs, usr/lib/byobu/Makefile.am,
    usr/lib/byobu/notify_osd, usr/lib/byobu/.notify_osd =>
    usr/lib/byobu/include/notify_osd, usr/lib/byobu/.shutil =>
    usr/lib/byobu/include/shutil, configure.ac, Makefile.am,
    usr/lib/byobu/include/Makefile.am:
    - LP: #833768
    - move dotfiles out of usr/lib/byobu and into usr/lib/byobu/include
    - this was triggering some chrootkit warnings
  * usr/share/doc/byobu/help.tmux.txt:
    - reorder some documentation
  * usr/bin/byobu-launcher-install:
    - close LP: #854764, which was recently fixed
  * us...

Read more...

Changed in byobu (Ubuntu Precise):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers