/usr/share/doc/chkrootkit/README.chklastlog is in chkrootkit 0.50-3.2~deb8u1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 | chklastlog - check lastlog-file for deleted information
Copyright (c) DFN-CERT, Univ. of Hamburg 1994
Univ. Hamburg, Dept. of Computer Science
DFN-CERT
Vogt-Koelln-Strasse 30
22527 Hamburg
Germany
This program is free software; you can distribute it and/or modify
it as long as you retain the DFN-CERT copyright statement.
It can be obtained via anonymous FTP from
ftp://ftp.cert.dfn.de/pub/tools/admin/chklastlog/chklastlog.tar.Z
This program is distributed WITHOUT ANY WARRANTY; without the IMPLIED
WARRANTY of merchantability or fitness for a particular purpose.
This package contains:
README
MANIFEST
chklastlog.1
chklastlog.c
chklastlog.txt
To create chklastlog under SunOS 4.x, type:
% cc -o chklastlog chklastlog.c
To run chklastlog you need read permission on the files /var/log/wtmp
and /var/log/lastlog. Normally these files are world-readable and
no special privileges are required to run the checker.
The following is an example of the output of chklastlog.
Running chklastlog on a machine with deleted lastlog-entries, under csh(1):
% chklastlog
user ley deleted from lastlog!
%
Running chklastlog on a machine with no deleted lastlog-entries, under csh(1):
% chklastlog
%
|