Version bump, thank Alon Bar-Lev and Alex Efros for work, bug #205419. Fixed shell history anomalies, bug #226067, thank Horst Prote for report and fix. Remove old.

Package-Manager: portage-2.2_rc11/cvs/Linux 2.6.26-gentoo-r1 i686

9 files changed, 51 insertions, 256 deletions

diff --git a/app-forensics/chkrootkit/ChangeLog b/app-forensics/chkrootkit/ChangeLog
index da96c8389174..d87c5a81b8b9 100644
--- a/app-forensics/chkrootkit/ChangeLog
+++ b/app-forensics/chkrootkit/ChangeLog
@@ -1,6 +1,19 @@
 # ChangeLog for app-forensics/chkrootkit
 # Copyright 2002-2008 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-forensics/chkrootkit/ChangeLog,v 1.46 2008/03/12 09:47:31 phreak Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-forensics/chkrootkit/ChangeLog,v 1.47 2008/10/06 19:38:01 pva Exp $
+
+*chkrootkit-0.48 (06 Oct 2008)
+
+  06 Oct 2008; Peter Volkov <pva@gentoo.org>
+  -files/chkrootkit-0.44-coreutils-static-falsepositive.patch,
+  -files/chkrootkit-0.45-makefile.diff,
+  -files/chkrootkit-0.46-add-missing-includes.diff,
+  +files/chkrootkit-0.48-shell-history-anomalies.diff,
+  -chkrootkit-0.44-r1.ebuild, -chkrootkit-0.45.ebuild,
+  -chkrootkit-0.46a.ebuild, +chkrootkit-0.48.ebuild:
+  Version bump, thank Alon Bar-Lev and Alex Efros for work, bug #205419.
+  Fixed shell history anomalies, bug #226067, thank Horst Prote for report
+  and fix. Remove old.
 
   12 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
   Removing Robert Clark (hyakuhei, #154737) from metadata.xml.
diff --git a/app-forensics/chkrootkit/Manifest b/app-forensics/chkrootkit/Manifest
index 0a9032c3ff6e..822d07b1d3df 100644
--- a/app-forensics/chkrootkit/Manifest
+++ b/app-forensics/chkrootkit/Manifest
@@ -1,28 +1,12 @@
------BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA1
-
-AUX chkrootkit-0.44-coreutils-static-falsepositive.patch 793 RMD160 476ad936624ea622e89e0ca231885c209e69c0f2 SHA1 f29c45a58374ae993a5afb4ee87968b2a47896f4 SHA256 68b783a18a9e2c246a6daf45bc6ae13fd251cac00bf34d6fe315504ae8720fc7
-AUX chkrootkit-0.45-makefile.diff 1866 RMD160 053ef2e9f5a45427f32f9a1af1934e5e0420b06f SHA1 a5d5f9ac8381735651a2fa8f24f5ac61afe92160 SHA256 b31448e463b7a73eed9bf366b74048288ef1dc1967609af52fa9913c145d7b3d
-AUX chkrootkit-0.46-add-missing-includes.diff 769 RMD160 5247693018ac56376f67dc3598a452f46b38cb63 SHA1 8c571297cecc4b3b78cb742b17c6a9a10967655c SHA256 9798aebaa3aa6c864d51d660186d6493ab31e10249c6d191329b82fe1fce07ef
 AUX chkrootkit-0.47-add-missing-includes.diff 152 RMD160 12cec174e951f388021cf877115e1e710c0e55e9 SHA1 ccf69ed8f3c635c628541e248e1825692e0c8943 SHA256 3b194908c2127a0e48558ad6b058cac6eb1048e3abab6814af09c23085c4070b
 AUX chkrootkit-0.47-makefile.diff 1895 RMD160 f9993fe6b97afefd4838a142050e90bce7c29737 SHA1 da6a7185fb9201fbce8caec65ed2c2d7f911e706 SHA256 7f92e89219f0d308f534072329e0904fe372d3ff7612c33265dec5c3c11014c9
+AUX chkrootkit-0.48-shell-history-anomalies.diff 957 RMD160 c01c394f259da39a7f6ff89982f9b82efd9954ed SHA1 a9a0251fd1ebbbc8f7857ac4fadc7632c706cb8a SHA256 77008eb1c35d0829156bf034ee2b303d9048d3ad3af27742af6967cef80754b1
 AUX chkrootkit.cron 78 RMD160 54e1c50088e2a90fad7340c0d0ebbe2099ff3dcc SHA1 1598c7ea3abf7c2497c30953d92d51cb42496eeb SHA256 3dfcff479e3b9e1cd79c6a65e0e668750dec0a88b09715d4fdf163c692a22412
-DIST chkrootkit-0.44-gentoo.diff.bz2 4049 RMD160 253fb7a550d5c4b159095001f714b6ad0d561019 SHA1 36a062d5298f5f6eff302fe541ec49789130744d SHA256 7de153ab7cef65df3c3c2d37c73dff8cf4e26596ff2d45a7d40e77c63e746e65
-DIST chkrootkit-0.44.tar.gz 34163 RMD160 8a6fc38b300ed2ada879e15d7abe008914e16b75 SHA1 54610d8dac4d0585306d95be5a55c2ac02c5fec6 SHA256 d01098099b7b094310dfd8cf8d2d9adb068b47fe1643fba716d6a658c3ecbab5
 DIST chkrootkit-0.45-gentoo.diff.bz2 3729 RMD160 84c1ca6b0f791b0727a1e61d104b23b4b3a9eb68 SHA1 b28633113895723de85ddc3b66b561d4a68c746c SHA256 ca26f4113c2e511f87179bc673faa198ab9b2e6d6de0134443ed301f0ebb1362
-DIST chkrootkit-0.45.tar.gz 36359 RMD160 f8aebf97993a8fbd51d98478dcf185f5e8a0f501 SHA1 2344585d0184d73a817fb8d4849dd8db36e7a6fa SHA256 67ce369dee026bd488baa977483c0d9784bc6763c815f6018ce19227669ec926
-DIST chkrootkit-0.46a.tar.gz 37140 RMD160 9016abfd7cd3d986aec86722c9a9b88dea7bf49b SHA1 5213b107cda5e5165da463650885efe8c15a14d2 SHA256 ec23b4be57e08f6c28f646a447a8545f9c612fd4b296133ac9c3c3ac13e1d696
 DIST chkrootkit-0.47.tar.gz 37791 RMD160 291746f60d0cc3bcf0e63387f3d7ff16a4215d17 SHA1 ef9ba1208572662a0da51dc284de550bf6378143 SHA256 5a5aeb597769cc2843648858b95fc7abd3485ba7edd1800d69e0125220c6669f
-EBUILD chkrootkit-0.44-r1.ebuild 1585 RMD160 67df115fcd9b61a4cd432a36fd1ec7007aeeca27 SHA1 e79dc07905364fde17bb72a7103268b1eb9e563a SHA256 904cdf299664cb6e08615aa2525ec235175a3a33e64977bbaecfd9d7e23d018d
-EBUILD chkrootkit-0.45.ebuild 1506 RMD160 79e694d8fa21bae185be417e024d043e499472ce SHA1 af3a5e405fd02cbccfa4c04820b449932d447e00 SHA256 a6b8380ce124d1d2f9d57e3dca546dcd2e22242f621daa1b7326d5c8c499e3c7
-EBUILD chkrootkit-0.46a.ebuild 1841 RMD160 2f8bb02d49e33e5fb5c2afdc342f1a003ae7657d SHA1 ed795997e1ae6126986b63e5fb21d9310ff79bb3 SHA256 e7c5e7cbecf4e536bc9933f1b7939f99fc6466673889e33b21455d712a7e2bd1
+DIST chkrootkit-0.48-gentoo.diff.bz2 4519 RMD160 0c8efb2780c298523d245aaa63c74b71bb83f8b2 SHA1 c730de0a2349ae8010d620c8000d083653ce6377 SHA256 91e6986ecaf6f44684127e3ddcdeb0ef74587660e20193d34cad76233321f83a
+DIST chkrootkit-0.48.tar.gz 38323 RMD160 4ab07d02dd9c366b32383d84a339ef72cd4e6703 SHA1 edbaf062a78f4210a7dbe9ef935cb86d12695d91 SHA256 b4b3d3540a7022aa7a81cae93f28c8475bc2660a21f88126725624c09769f1fb
 EBUILD chkrootkit-0.47.ebuild 1732 RMD160 a01de8a106fd460668e11d2443dd54e7cef6b87a SHA1 ddd02869aa3b65ea592340e3bcd89de1b9c8c404 SHA256 0363cf50aab5fef3d6959fcb58b7ee21a01c18b708cae9e60e9a2abb2aa0a5e6
-MISC ChangeLog 11856 RMD160 6fae55ea11a8fe408de12117ee219e5603660d2c SHA1 09b0d75cc257c1e6f50b437ffdd335e8e73766ff SHA256 6be2dfb4be4cc62298d8fa76b16afba87f0c61ff924900e85ed2b17391ec8ec2
+EBUILD chkrootkit-0.48.ebuild 1386 RMD160 0822beacb30c3f233ea5f423cdc14a9667f15d95 SHA1 2c5e95f7324701151abe98b6fcdf6b015383ef47 SHA256 bb9879a4f2d2e5509fe4ef97eb8f2017ccedb5d897ecbef07d438f45cedc2c80
+MISC ChangeLog 12420 RMD160 3137c72747b6eb93b01899f8145bedbd50f307ba SHA1 44a6ee92cd9135926ee57688546ce4dbb0d6e81d SHA256 324dac30629b1ed0330a7476894fdc7ecf2bf27b018539e8d887fbe268212af7
 MISC metadata.xml 163 RMD160 cd9adc76a05a5a4d079045e90a823e487000fbe0 SHA1 499d07496dd075e4685d50b4a3284386d29d7de4 SHA256 a072456ba64483cd3108f6125498634a060a449c9ce7dfa512549fbf78601e09
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v2.0.7 (GNU/Linux)
-
-iD8DBQFH16a4yuNVb5qfaOYRAjK3AJ910V+qZ7KJb/Tc85eZNKJqkgGnNgCgjXdK
-dMcINgcJfXjFhKuWyI0ksGk=
-=7mOV
------END PGP SIGNATURE-----
diff --git a/app-forensics/chkrootkit/chkrootkit-0.44-r1.ebuild b/app-forensics/chkrootkit/chkrootkit-0.44-r1.ebuild
deleted file mode 100644
index 8584a0c0a57b..000000000000
--- a/app-forensics/chkrootkit/chkrootkit-0.44-r1.ebuild
+++ /dev/null
@@ -1,53 +0,0 @@
-# Copyright 1999-2007 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/app-forensics/chkrootkit/chkrootkit-0.44-r1.ebuild,v 1.4 2007/01/24 03:16:55 genone Exp $
-
-inherit eutils flag-o-matic toolchain-funcs
-
-DESCRIPTION="a tool to locally check for signs of a rootkit"
-HOMEPAGE="http://www.chkrootkit.org/"
-SRC_URI="ftp://ftp.pangeia.com.br/pub/seg/pac/${P}.tar.gz
-	mirror://gentoo/${P}-gentoo.diff.bz2"
-
-LICENSE="AMS"
-SLOT="0"
-KEYWORDS="alpha amd64 arm hppa ia64 ~mips ppc ppc64 s390 sparc x86"
-IUSE=""
-
-DEPEND="virtual/libc"
-
-src_unpack() {
-	unpack ${A}
-	cd ${S}
-	epatch ${WORKDIR}/${P}-gentoo.diff || die "patch failed"
-	sed -i 's:${head} -:${head} -n :' chkrootkit || die "sed chkrootkit failed"
-	sed -i 's:/var/adm:/var/log:g' chklastlog.c || die "sed chklastlog.c failed"
-	epatch ${FILESDIR}/${P}-coreutils-static-falsepositive.patch || die "patch failed"
-}
-
-src_compile() {
-	emake \
-		CC=$(tc-getCC) \
-		CFLAGS="${CFLAGS}" \
-		LDFLAGS="${LDFLAGS}" \
-		sense || die "emake sense failed"
-}
-
-src_install() {
-	dosbin chkdirs chklastlog chkproc chkrootkit chkwtmp ifpromisc \
-		strings-static || die
-	dodoc README README.chklastlog README.chkwtmp
-
-	exeinto /etc/cron.weekly
-	newexe ${FILESDIR}/${PN}.cron ${PN} || die
-}
-
-pkg_postinst() {
-	echo
-	elog "Edit /etc/cron.weekly/chkrootkit to activate chkrootkit!"
-	elog
-	elog "Some applications, such as portsentry, will cause chkrootkit"
-	elog "to produce false positives.  Read the chkrootkit FAQ at"
-	elog "http://www.chkrootkit.org/ for more information."
-	echo
-}
diff --git a/app-forensics/chkrootkit/chkrootkit-0.46a.ebuild b/app-forensics/chkrootkit/chkrootkit-0.46a.ebuild
deleted file mode 100644
index f318fa493f05..000000000000
--- a/app-forensics/chkrootkit/chkrootkit-0.46a.ebuild
+++ /dev/null
@@ -1,61 +0,0 @@
-# Copyright 1999-2007 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/app-forensics/chkrootkit/chkrootkit-0.46a.ebuild,v 1.2 2007/01/24 03:16:55 genone Exp $
-
-inherit eutils flag-o-matic toolchain-funcs
-
-DESCRIPTION="a tool to locally check for signs of a rootkit"
-HOMEPAGE="http://www.chkrootkit.org/"
-SRC_URI="ftp://ftp.pangeia.com.br/pub/seg/pac/${P}.tar.gz
-	mirror://gentoo/${PN}-0.45-gentoo.diff.bz2"
-
-LICENSE="AMS"
-SLOT="0"
-KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~mips ~ppc ~ppc64 ~s390 ~sparc ~x86"
-IUSE=""
-
-DEPEND="virtual/libc"
-
-src_unpack() {
-	unpack ${A}
-	cd ${S}
-
-	# we can use the gentoo patch for 0.45 but it needs one change to apply
-	# cleanly -- certainly not enough to warrant using a separate 32k patch.
-	sed -e 's|\(xlogin\)|\^\1|' ${WORKDIR}/${PN}-0.45-gentoo.diff > \
-								 ${WORKDIR}/${P}-gentoo.diff
-	epatch ${WORKDIR}/${P}-gentoo.diff
-
-	epatch ${FILESDIR}/${PN}-0.45-makefile.diff
-	epatch ${FILESDIR}/${PN}-0.46-add-missing-includes.diff
-
-	sed -i 's:${head} -:${head} -n :' chkrootkit || die "sed chkrootkit failed"
-	sed -i 's:/var/adm:/var/log:g' chklastlog.c || die "sed chklastlog.c failed"
-}
-
-src_compile() {
-	emake \
-		CC=$(tc-getCC) \
-		CFLAGS="${CFLAGS}" \
-		LDFLAGS="${LDFLAGS}" \
-		sense || die "emake sense failed"
-}
-
-src_install() {
-	dosbin chkdirs chklastlog chkproc chkrootkit chkwtmp chkutmp ifpromisc \
-		strings-static || die
-	dodoc ACKNOWLEDGMENTS README*
-
-	exeinto /etc/cron.weekly
-	newexe ${FILESDIR}/${PN}.cron ${PN} || die
-}
-
-pkg_postinst() {
-	echo
-	elog "Edit /etc/cron.weekly/chkrootkit to activate chkrootkit!"
-	elog
-	elog "Some applications, such as portsentry, will cause chkrootkit"
-	elog "to produce false positives.  Read the chkrootkit FAQ at"
-	elog "http://www.chkrootkit.org/ for more information."
-	echo
-}
diff --git a/app-forensics/chkrootkit/chkrootkit-0.45.ebuild b/app-forensics/chkrootkit/chkrootkit-0.48.ebuild
index 728e83ba3111..72c739aabf37 100644
--- a/app-forensics/chkrootkit/chkrootkit-0.45.ebuild
+++ b/app-forensics/chkrootkit/chkrootkit-0.48.ebuild
@@ -1,8 +1,8 @@
-# Copyright 1999-2007 Gentoo Foundation
+# Copyright 1999-2008 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/app-forensics/chkrootkit/chkrootkit-0.45.ebuild,v 1.11 2007/01/26 20:10:52 eroyf Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-forensics/chkrootkit/chkrootkit-0.48.ebuild,v 1.1 2008/10/06 19:38:01 pva Exp $
 
-inherit eutils flag-o-matic toolchain-funcs
+inherit eutils toolchain-funcs
 
 DESCRIPTION="a tool to locally check for signs of a rootkit"
 HOMEPAGE="http://www.chkrootkit.org/"
@@ -11,26 +11,20 @@ SRC_URI="ftp://ftp.pangeia.com.br/pub/seg/pac/${P}.tar.gz
 
 LICENSE="AMS"
 SLOT="0"
-KEYWORDS="alpha amd64 arm hppa ia64 mips ppc ppc64 s390 sparc x86"
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86"
 IUSE=""
 
-DEPEND="virtual/libc"
-
 src_unpack() {
 	unpack ${A}
-	cd ${S}
-	epatch ${FILESDIR}/${P}-makefile.diff
-	epatch ${WORKDIR}/${P}-gentoo.diff
-	sed -i 's:${head} -:${head} -n :' chkrootkit || die "sed chkrootkit failed"
-	sed -i 's:/var/adm:/var/log:g' chklastlog.c || die "sed chklastlog.c failed"
+	cd "${S}"
+
+	epatch "${WORKDIR}/${P}-gentoo.diff"
+	epatch "${FILESDIR}/${P}-shell-history-anomalies.diff"
+	sed -i 's:/var/adm/:/var/log/:g' chklastlog.c || die "sed chklastlog.c failed"
 }
 
 src_compile() {
-	emake \
-		CC=$(tc-getCC) \
-		CFLAGS="${CFLAGS}" \
-		LDFLAGS="${LDFLAGS}" \
-		sense || die "emake sense failed"
+	emake CC=$(tc-getCC) STRIP=true sense || die "emake sense failed"
 }
 
 src_install() {
@@ -39,7 +33,7 @@ src_install() {
 	dodoc ACKNOWLEDGMENTS README*
 
 	exeinto /etc/cron.weekly
-	newexe ${FILESDIR}/${PN}.cron ${PN} || die
+	newexe "${FILESDIR}"/${PN}.cron ${PN} || die
 }
 
 pkg_postinst() {
diff --git a/app-forensics/chkrootkit/files/chkrootkit-0.44-coreutils-static-falsepositive.patch b/app-forensics/chkrootkit/files/chkrootkit-0.44-coreutils-static-falsepositive.patch
deleted file mode 100644
index 4aa692e775a7..000000000000
--- a/app-forensics/chkrootkit/files/chkrootkit-0.44-coreutils-static-falsepositive.patch
+++ /dev/null
@@ -1,20 +0,0 @@
---- chkrootkit.orig	2005-01-23 23:29:05.017022840 +0930
-+++ chkrootkit	2005-01-23 23:30:07.494524816 +0930
-@@ -1354,7 +1354,7 @@
- 
- chk_ls () {
-     STATUS=${NOT_INFECTED}
--LS_INFECTED_LABEL="/dev/ttyof|/dev/pty[pqrs]|/dev/hdl0|\.tmp/lsfile|/dev/hdcc|/dev/ptyxx|duarawkz|/prof|/dev/tux|/security|file\.h"
-+LS_INFECTED_LABEL="/dev/ttyof|/dev/pty[pqrs]|/dev/hdl0|\.tmp/lsfile|/dev/hdcc|/dev/ptyxx|duarawkz|^/prof|/dev/tux|/security|file\.h"
-     CMD=`loc ls ls $pth`
- 
-     if [ "${EXPERT}" = "t" ]; then
-@@ -1371,7 +1371,7 @@
- 
- chk_du () {
-     STATUS=${NOT_INFECTED}
--    DU_INFECTED_LABEL="/dev/ttyof|/dev/pty[pqrsx]|w0rm|/prof|/dev/tux|file\.h"
-+    DU_INFECTED_LABEL="/dev/ttyof|/dev/pty[pqrsx]|w0rm|^/prof|/dev/tux|file\.h"
-     CMD=`loc du du $pth`
- 
-     if [ "${EXPERT}" = "t" ]; then
diff --git a/app-forensics/chkrootkit/files/chkrootkit-0.45-makefile.diff b/app-forensics/chkrootkit/files/chkrootkit-0.45-makefile.diff
deleted file mode 100644
index 3a026e8e9f0c..000000000000
--- a/app-forensics/chkrootkit/files/chkrootkit-0.45-makefile.diff
+++ /dev/null
@@ -1,61 +0,0 @@
-diff --exclude='*~' -urN chkrootkit-0.45.orig/Makefile chkrootkit-0.45/Makefile
---- chkrootkit-0.45.orig/Makefile	2005-02-24 21:08:21.044113456 -0500
-+++ chkrootkit-0.45/Makefile	2005-02-24 21:17:06.437241560 -0500
-@@ -23,48 +23,37 @@
- #CFLAGS	 =
- 
- 
--SRCS   = chklastlog.c chkwtmp.c ifpromisc.c chkproc.c chkdirs.c check_wtmpx.c strings.c
-+SRCS   = chklastlog.c chkwtmp.c ifpromisc.c chkproc.c chkdirs.c strings.c
- 
--OBJS   = chklastlog.o chkwtmp.o ifpromisc.o chkproc.o chkdirs.o check_wtmpx.o strings-static.o
-+OBJS   = chklastlog.o chkwtmp.o ifpromisc.o chkproc.o chkdirs.o strings-static.o
- 
- all:
- 	@echo '*** stopping make sense ***'
- 	@exec make sense
- 
--sense: chklastlog chkwtmp ifpromisc chkproc chkdirs check_wtmpx strings-static chkutmp
-+sense: chklastlog chkwtmp ifpromisc chkproc chkdirs strings-static chkutmp
- 
- chklastlog:   chklastlog.c
--	${CC} ${CFLAGS} -o $@ chklastlog.c
--	@strip $@
-+	${CC} ${CFLAGS} ${LDFLAGS} -o $@ chklastlog.c
- 
- chkwtmp:   chkwtmp.c
--	${CC} ${CFLAGS} -o $@ chkwtmp.c
--	@strip $@
-+	${CC} ${CFLAGS} ${LDFLAGS} -o $@ chkwtmp.c
- 
- ifpromisc:   ifpromisc.c
- 	${CC} ${CFLAGS} ${LDFLAGS}  -D_FILE_OFFSET_BITS=64 -o $@ ifpromisc.c
--	@strip $@
- 
- chkproc:   chkproc.c
--	${CC} ${LDFLAGS} -o $@ chkproc.c
--	@strip $@
-+	${CC} ${CFLAGS} ${LDFLAGS} -o $@ chkproc.c
- 
- chkdirs:   chkdirs.c
--	${CC} ${LDFLAGS} -o $@ chkdirs.c
--	@strip $@
--
--check_wtmpx:   check_wtmpx.c
--	${CC} ${LDFLAGS} -o $@ check_wtmpx.c
-+	${CC} ${CFLAGS} ${LDFLAGS} -o $@ chkdirs.c
- 	@strip $@
- 
- chkutmp:   chkutmp.c
--	${CC} ${LDFLAGS} -o $@ chkutmp.c
--	@strip $@
--
-+	${CC} ${CFLAGS} ${LDFLAGS} -o $@ chkutmp.c
- 
- strings-static:   strings.c
--	${CC} ${STATIC} ${LDFLAGS} -o $@ strings.c
--	@strip $@
-+	${CC} ${STATIC} ${CFLAGS} ${LDFLAGS} -o $@ strings.c
- 
- clean:
- 	rm -f ${OBJS} core chklastlog chkwtmp ifpromisc chkproc chkdirs check_wtmpx strings-static chkutmp
diff --git a/app-forensics/chkrootkit/files/chkrootkit-0.46-add-missing-includes.diff b/app-forensics/chkrootkit/files/chkrootkit-0.46-add-missing-includes.diff
deleted file mode 100644
index 99dc86ae0142..000000000000
--- a/app-forensics/chkrootkit/files/chkrootkit-0.46-add-missing-includes.diff
+++ /dev/null
@@ -1,22 +0,0 @@
-diff --exclude='*~' --exclude='.*' -I '$Id:' -urN chkrootkit-0.46.orig/chkproc.c chkrootkit-0.46/chkproc.c
---- chkrootkit-0.46.orig/chkproc.c	2005-10-27 08:29:26.000000000 -0400
-+++ chkrootkit-0.46/chkproc.c	2005-10-27 08:30:42.000000000 -0400
-@@ -43,6 +43,7 @@
- int main (){ return 0; }
- #else
- #include <stdio.h>
-+#include <string.h>
- #include <errno.h>
- #include <sys/types.h>
- #include <dirent.h>
-diff --exclude='*~' --exclude='.*' -I '$Id:' -urN chkrootkit-0.46.orig/chkwtmp.c chkrootkit-0.46/chkwtmp.c
---- chkrootkit-0.46.orig/chkwtmp.c	2005-10-27 08:29:26.000000000 -0400
-+++ chkrootkit-0.46/chkwtmp.c	2005-10-27 08:30:45.000000000 -0400
-@@ -21,6 +21,7 @@
- 
- 
- #include <stdio.h>
-+#include <stdlib.h>
- #include <unistd.h>
- #include <string.h>
- #include <utmp.h>
diff --git a/app-forensics/chkrootkit/files/chkrootkit-0.48-shell-history-anomalies.diff b/app-forensics/chkrootkit/files/chkrootkit-0.48-shell-history-anomalies.diff
new file mode 100644
index 000000000000..0d58bd87d851
--- /dev/null
+++ b/app-forensics/chkrootkit/files/chkrootkit-0.48-shell-history-anomalies.diff
@@ -0,0 +1,21 @@
+http://bugs.gentoo.org/show_bug.cgi?id=226067
+
+*** /usr/sbin/chkrootkit.orig	Thu Jun 12 15:20:01 2008
+--- /usr/sbin/chkrootkit	Thu Jun 12 15:28:09 2008
+***************
+*** 1098,1104 ****
+          echo "Warning: \`${files}' file size is zero"
+        files1=`${find} ${ROOTDIR}${HOME} ${findargs} -name '.*history' \( -links 2 -o -type l \)`
+        [ ! -z "${files1}" ] && \
+!         echo "Warning: \`${files}' is linked to another file"
+     fi
+     if [ -z "${files}" -a -z "${files1}" ]; then
+        if [ "${QUIET}" != "t" ]; then echo "nothing found"; fi
+--- 1098,1104 ----
+          echo "Warning: \`${files}' file size is zero"
+        files1=`${find} ${ROOTDIR}${HOME} ${findargs} -name '.*history' \( -links 2 -o -type l \)`
+        [ ! -z "${files1}" ] && \
+!         echo "Warning: \`${files1}' is linked to another file"
+     fi
+     if [ -z "${files}" -a -z "${files1}" ]; then
+        if [ "${QUIET}" != "t" ]; then echo "nothing found"; fi