Bug#705946: chkrootkit: Check for suspect PHP files is broken by design

2013-04-22 Thread Andreas Stempfhuber
Hi, just to note that the Debian changelog for version 0.48-7 contains: * debian/patches/nophpcheck.dpatch: Delete the "suspect PHP files" check. Not only does it trigger SIGPIPE for file names which contain special unescaped characters, the second half is doubtful (it doesn't print any

Bug#705946: chkrootkit: Check for suspect PHP files is broken by design

2013-04-22 Thread Andreas Stempfhuber
Package: chkrootkit Version: 0.49-4 Severity: important Tags: patch Hi, the check for suspect PHP files is broken by design. 1. Any non-text file contents confuse the results of the grep if they match. 2. Not file names are printed, but file contents. That can't be what the check is supposed t