Your message dated Tue, 28 Jul 2009 13:48:18 +0000
with message-id <e1mvn2q-0002cr...@ries.debian.org>
and subject line Bug#531364: fixed in unhide 20080519-5
has caused the Debian Bug report #531364,
regarding ITA: unhide -- Forensic tool to find hidden processes
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
531364: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=531364
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: wnpp
Severity: normal
I request an adopter for the unhide package.
The package description is:
Unhide is a forensic tool to find processes and TCP/UDP ports hidden by
rootkits, Linux kernel modules or by other techniques. It includes two
utilities: unhide and unhide-tcp.
.
unhide detects hidden processes using three techniques:
- comparing the output of /proc and /bin/ps
- comparing the information gathered from /bin/ps with the one gathered
from system calls (syscall scanning)
- full scan of the process ID space (PIDs bruteforcing)
.
unhide-tcp identifies TCP/UDP ports that are listening but are not listed in
/bin/netstat through brute forcing of all TCP/UDP ports available.
.
This package can be used by rkhunter in its daily scans.
The package is in good shape and upstream is very nice and responsive.
One thing you may want to consider if you adopt this package is how to integrate
this version of unhide re-written in ruby which is said to be faster:
https://launchpad.net/unhide.rb
Cheers,
Francois
--- End Message ---
--- Begin Message ---
Source: unhide
Source-Version: 20080519-5
We believe that the bug you reported is fixed in the latest version of
unhide, which is due to be installed in the Debian FTP archive:
unhide_20080519-5.diff.gz
to pool/main/u/unhide/unhide_20080519-5.diff.gz
unhide_20080519-5.dsc
to pool/main/u/unhide/unhide_20080519-5.dsc
unhide_20080519-5_i386.deb
to pool/main/u/unhide/unhide_20080519-5_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 531...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Daniel Baumann <dan...@debian.org> (supplier of updated unhide package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Tue, 28 Jul 2009 15:32:56 +0200
Source: unhide
Binary: unhide
Architecture: source i386
Version: 20080519-5
Distribution: unstable
Urgency: low
Maintainer: Debian Forensics <forensics-de...@lists.alioth.debian.org>
Changed-By: Daniel Baumann <dan...@debian.org>
Description:
unhide - Forensic tool to find hidden processes and ports
Closes: 531364
Changes:
unhide (20080519-5) unstable; urgency=low
.
* Using correct rfc-2822 date formats in changelog.
* New maintainer (Closes: #531364).
* Updating vcs fields in control.
* Updating package to standards version 3.8.2.
* Reformating package long-description in control.
* Rewriting copyright file in machine-interpretable format.
* Prefixing debhelper files with package name.
* Using quilt rather than dpatch.
* Using dedicated debhelper manpages file.
* Using dedicated debhelper links file.
* Using dedicated debhelper install file.
* Removing useless debhelper dirs file.
* Minimalizing rules file.
* Reformating maintainer scripts.
* Rewrapping README.Debian.
* Removing useless whitespaces in manpages.
* Addinglintian source overrides.
Checksums-Sha1:
0ed7cdbcb1221d267e678e29b2189fccac12d18a 1208 unhide_20080519-5.dsc
9fb6b9ee78eddb206aa301dd9e8768b7c6b4385e 4231 unhide_20080519-5.diff.gz
d440e836317c83303dfefdfee2dd9e737f541d7e 734832 unhide_20080519-5_i386.deb
Checksums-Sha256:
64ea9ed19f1ef0a9779422e8d65a3ba89fab93b53cbb650666e3b09212afea36 1208
unhide_20080519-5.dsc
2c3709879e6ae5f77f1a7398e34787033b182029e785feaa9919e2274b84895b 4231
unhide_20080519-5.diff.gz
29e8ac990c7e2d517628def1d8b12d5d59e0aa57ffc4e49ba30cd0e5984e7d58 734832
unhide_20080519-5_i386.deb
Files:
1b394a5aae26066f2a8961cb2c2e97ef 1208 admin extra unhide_20080519-5.dsc
07e4726b6aac787e096ae08b6cea5716 4231 admin extra unhide_20080519-5.diff.gz
3f5c1378a179b408b9aaa9ad87c2df3d 734832 admin extra unhide_20080519-5_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkpu/iUACgkQ+C5cwEsrK56CLQCgjGi7F1Pmb58Q7YTbsco/Y+an
pOkAn3kFDR4tqrR8WZm4yZmnZlPXBogX
=Jk2n
-----END PGP SIGNATURE-----
--- End Message ---
