dot-files in system path /usr/lib trigger chkrootkit warnings

Bug #833768 reported by Aaron Haviland
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
byobu
Fix Released
Wishlist
Dustin Kirkland 
byobu (Ubuntu)
Fix Released
Wishlist
Dustin Kirkland 
Oneiric
Won't Fix
Wishlist
Unassigned
Precise
Fix Released
Wishlist
Dustin Kirkland 

Bug Description

After installing byobu, I get the following output from chkrootkit:

Searching for suspicious files and dirs, it may take a while... The following suspicious files and directories were found:
/usr/lib/byobu/.constants /usr/lib/byobu/.common /usr/lib/byobu/.dirs /usr/lib/byobu/.shutil /usr/lib/byobu/.notify_osd

Can these be renamed so as not to trigger a false positive?

byobu:
  Installed: 4.31-0ubuntu1~ppa3
  Candidate: 4.31-0ubuntu1~ppa3
  Version table:
 *** 4.31-0ubuntu1~ppa3 0
        500 http://ppa.launchpad.net/byobu/ppa/ubuntu/ maverick/main amd64 Packages
        100 /var/lib/dpkg/status
     3.5-0ubuntu1 0
        500 http://us.archive.ubuntu.com/ubuntu/ maverick/main amd64 Packages
chkrootkit:
  Installed: 0.49-4
  Candidate: 0.49-4
  Version table:
 *** 0.49-4 0
        500 http://us.archive.ubuntu.com/ubuntu/ maverick/main amd64 Packages
        100 /var/lib/dpkg/status

Changed in byobu:
importance: Undecided → Wishlist
status: New → Confirmed
Revision history for this message
Dustin Kirkland  (kirkland) wrote :

Hi Aaron, thanks for the report. I need to think about how to fix this. These files are "hidden" files in that they're helpers to be used by the status scripts in /usr/lib/byobu. I will probably need to add 2 directories under there:
  - /usr/lib/byobu/status/*
  - /usr/lib/byobu/lib/*
or something like that.

I'll need to give this some thought so that upgrades proceed cleanly. I won't be able to fix this for 11.10, but will try to get it cleaned up for 12.04. Thanks.

Changed in byobu (Ubuntu Oneiric):
status: New → Won't Fix
importance: Undecided → Wishlist
Changed in byobu:
status: Confirmed → Triaged
Changed in byobu (Ubuntu):
status: New → Confirmed
Changed in byobu (Ubuntu):
importance: Undecided → Wishlist
Changed in byobu:
status: Triaged → In Progress
Changed in byobu (Ubuntu Precise):
status: Triaged → In Progress
Changed in byobu:
assignee: nobody → Dustin Kirkland (kirkland)
Changed in byobu (Ubuntu Precise):
assignee: nobody → Dustin Kirkland (kirkland)
Changed in byobu:
status: In Progress → Fix Committed
Changed in byobu (Ubuntu Precise):
status: In Progress → Fix Committed
Changed in byobu:
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (4.6 KiB)

This bug was fixed in the package byobu - 4.47-0ubuntu1

---------------
byobu (4.47-0ubuntu1) precise; urgency=low

  * etc/profile.d/Z97-byobu.sh:
    - remove unnecessary 'true'
  * usr/share/byobu/ec2/Makefile.am, usr/share/byobu/ec2/rates.ap-
    northeast-1, usr/share/byobu/ec2/rates.ap-southeast-1,
    usr/share/byobu/ec2/rates.eu-west-1, usr/share/byobu/ec2/rates.us-
    east-1, usr/share/byobu/ec2/rates.us-west-1,
    usr/share/byobu/ec2/rates.us-west-2: LP: #888196
    - added new us-west-2 (Oregon) pricing region
  * close LP: #888106, fixed in last release
  * usr/share/byobu/profiles/tmux, usr/share/doc/byobu/help.tmux.txt,
    usr/share/doc/byobu/Makefile.am:
    - add a tmux keybinding help screen, bind to Shift-F1
  * usr/share/byobu/profiles/tmux, usr/share/doc/byobu/help.tmux.txt:
    - add a keybinding Ctrl-Shift-F2 to create a new session
  * usr/share/byobu/profiles/tmux:
    - rearrange to match help text; would be good to keep these
      coordinated
  * usr/share/byobu/profiles/tmux, usr/share/doc/byobu/help.tmux.txt:
    - Alt-F11 breaks split into new window
    - Shift-F11 puts window into a horizontal split in previous window
    - Ctrl-F11 puts window into a vertical split in previous window
  * usr/share/doc/byobu/help.tmux.txt:
    - fix typo
  * usr/share/byobu/keybindings/f-keys.tmux,
    usr/share/byobu/keybindings/f-keys.tmux.disable,
    usr/share/byobu/keybindings/Makefile.am,
    usr/share/byobu/profiles/tmux, usr/share/doc/byobu/help.tmux.txt:
    - LP: #888247
    - Add Shift-F12 to toggle keybindings on/off
    - Split tmux keybindings to separate file to source
  * usr/bin/byobu-status-detail, usr/lib/byobu/.constants,
    usr/share/byobu/keybindings/f-keys.tmux:
    - set a BYOBU_PAGER environment variable
    - use BYOBU_PAGER in places we need a pager
  * === added directory usr/lib/byobu/include, experimental/byobu-
    classroom, usr/bin/byobu, usr/bin/byobu-ctrl-a, usr/bin/byobu-
    disable, usr/bin/byobu-enable, usr/bin/byobu-export, usr/bin/byobu-
    janitor, usr/bin/byobu-launch, usr/bin/byobu-launcher,
    usr/bin/byobu-launcher-install, usr/bin/byobu-launcher-uninstall,
    usr/bin/byobu-quiet, usr/bin/byobu-reconnect-sockets, usr/bin/byobu-
    select-backend, usr/bin/byobu-select-profile, usr/bin/byobu-shell,
    usr/bin/byobu-silent, usr/bin/byobu-status, usr/bin/byobu-status-
    detail, usr/bin/byobu-ugraph, usr/bin/byobu-ulevel,
    usr/lib/byobu/.common => usr/lib/byobu/include/common (properties
    changed: -x to +x), usr/lib/byobu/.constants =>
    usr/lib/byobu/include/constants, usr/lib/byobu/.dirs =>
    usr/lib/byobu/include/dirs, usr/lib/byobu/Makefile.am,
    usr/lib/byobu/notify_osd, usr/lib/byobu/.notify_osd =>
    usr/lib/byobu/include/notify_osd, usr/lib/byobu/.shutil =>
    usr/lib/byobu/include/shutil, configure.ac, Makefile.am,
    usr/lib/byobu/include/Makefile.am:
    - LP: #833768
    - move dotfiles out of usr/lib/byobu and into usr/lib/byobu/include
    - this was triggering some chrootkit warnings
  * usr/share/doc/byobu/help.tmux.txt:
    - reorder some documentation
  * usr/bin/byobu-launcher-install:
    - close LP: #854764, which was recently fixed
  * us...

Read more...

Changed in byobu (Ubuntu Precise):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.