Library problems??

live_dont_exist · 02-13-2006, 03:48 AM

Hi all,
Im a security consultant and have been trying to test a rootkit called KIS.I have a RedHat 9.0 system.

The client gets insatlled OK but the server throws a lot of errors like

Code:

gcc -Wall -O2 -Wstrict-prototypes -fomit-frame-pointer -pipe -fno-strength-reduce -malign-loops=2 -malign-jumps=2 -malign-functions=2 -include /usr/src/linux/include/linux/modversions.h -I/usr/src/linux/include -c kis.c -o kis.o -D__KERNEL__ -DMODULE -DMODVERSIONS -D__KERNEL_SYSCALLS__
cc1: warning: -malign-loops is obsolete, use -falign-loops
cc1: warning: -malign-jumps is obsolete, use -falign-jumps
cc1: warning: -malign-functions is obsolete, use -falign-functions
<command line>:137890663:2928: /usr/src/linux/include/linux/modversions.h: No such file or directory
In file included from /usr/include/linux/fs.h:23,
                 from /usr/include/linux/capability.h:17,
                 from /usr/include/linux/binfmts.h:5,
                 from /usr/include/linux/sched.h:9,
                 from kis.c:13:
/usr/include/linux/string.h:8:2: warning: #warning Using kernel header in userland!
In file included from /usr/include/linux/sched.h:14,
                 from kis.c:13:
/usr/include/linux/timex.h:173: field `time' has incomplete type
In file included from /usr/include/linux/bitops.h:69,
                 from /usr/include/asm/system.h:7,
                 from /usr/include/linux/sched.h:16,
                 from kis.c:13:
/usr/include/asm/bitops.h:327:2: warning: #warning This includefile is not available on all architectures.
/usr/include/asm/bitops.h:328:2: warning: #warning Using kernel headers in userspace: atomicity not guaranteed
In file included from /usr/include/linux/signal.h:4,
                 from /usr/include/linux/sched.h:25,
                 from kis.c:13:
/usr/include/asm/signal.h:107: parse error before "sigset_t"
/usr/include/asm/signal.h:110: parse error before '}' token
In file included from /usr/include/linux/sched.h:81,
                 from kis.c:13:
/usr/include/linux/timer.h:45: parse error before "spinlock_t"

Now Im not asking for help on KIS ; I know this is not the place...I only want to kow what these errors are.Do they mean that all my header files are outdated and I need to upgrade?

Ive seen this error in other packages as well at times but I dont remember what the hell I did to fix it.

If any1 can point me in the right direction I would be greatly obliged.

Thnx
Arvind

bulliver · 02-13-2006, 03:33 PM

Perhaps this was written for a 2.4.x kernel and you are running a 2.6.x kernel?
Do you have kernel source installed in /usr/src/linux?
In any event, GCC doesn't like the code of this KIS rootkit.
You may have to fix the parse errors (ie: syntactic errors) by hand...