1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
|
From: Richard Lewis <richard.lewis.debian@googlemail.com>
Date: Tue, 15 Oct 2024 23:11:30 +0100
Subject: chkrootkit: OSX_RSPLUG
Forwarded: yes
(Forwarded by email: 21 Dec 2024)
---
chkrootkit | 36 ++++++++++++++++++------------------
1 file changed, 18 insertions(+), 18 deletions(-)
diff --git a/chkrootkit b/chkrootkit
index d60da5a..b2c6863 100755
--- a/chkrootkit
+++ b/chkrootkit
@@ -70,29 +70,29 @@ w55808 (){
}
OSX_RSPLUG (){
- if [ ${SYSTEM} != "Darwin" ]; then
+ if [ "${SYSTEM}" != "Darwin" ]; then
if [ "${QUIET}" != "t" ]; then echo "not tested"; fi
- return
- fi
- SAVEIFS=$IFS
- IFS=';'
- STATUS=0
- OSX_RSPLUG_FILES='/Library/Internet Plug-Ins/QuickTime.xpt;/Library/Internet Plug-Ins/plugins.settings'
+ return
+ fi
+ SAVEIFS=$IFS
+ IFS=';'
+ STATUS=0
+ OSX_RSPLUG_FILES='/Library/Internet Plug-Ins/QuickTime.xpt;/Library/Internet Plug-Ins/plugins.settings'
# echo checking ${OSX_RSPLUG_FILES}
- for i in ${OSX_RSPLUG_FILES} ; do
- echo searching for "${i}"
- if [ -e "${i}" ] ; then
- STATUS=1
- fi
- done
- IFS=$SAVEIFS
+ for i in ${OSX_RSPLUG_FILES} ; do
+ echo searching for "${i}"
+ if [ -e "${i}" ] ; then
+ STATUS=1
+ fi
+ done
+ IFS=$SAVEIFS
- if [ ${STATUS} -eq 1 ] ;then
+ if [ "${STATUS}" -eq 1 ] ;then
echo "Warning: OSX.RSPlug.A Trojan Horse found"
- return ${INFECTED}
+ return "${INFECTED}"
else
- if [ "${QUIET}" != "t" ]; then echo "not infected"; fi
- return ${NOT_INFECTED}
+ if [ "${QUIET}" != "t" ]; then echo "not infected"; fi
+ return "${NOT_INFECTED}"
fi
}
|
