Commit 6dc1125c authored by Francisco Vilmar Cardoso Ruviaro's avatar Francisco Vilmar Cardoso Ruviaro Committed by Nong Hoang Tu
Browse files

Import Debian changes 2.24-5

autopsy (2.24-5) unstable; urgency=medium
.
  * QA upload.
  * Ran wrap-and-sort -a.
  * debian/rules: migrated to reduced format. Consequently:
      - Created debian/autopsy.docs and debian/autopsy.manpages.
  * debian/autopsy.lintian-overrides: created.
  * debian/control:
      - Added VCS fields to use Salsa.
      - Reordered fields.
  * debian/copyright:
      - Updated License paragraphs.
      - Updated packaging copyright.
  * debian/gbp.conf: created to configure git-buildpackage.
  * debian/patches/05-find-perm.patch: added 'Forwarded: not-needed'.
  * debian/salsa-ci.yml: created to provide CI tests for Salsa.
.
autopsy (2.24-4) unstable; urgency=medium
.
  * QA upload.
  * Using new DH level format. Consequently:
      - debian/compat: removed.
      - debian/control: changed from 'debhelper' to 'debhelper-compat' in
        Build-Depends field and bumped level to 13.
  * debian/control:
      - Bumped Standards-Version to 4.5.0.
      - Set Rules-Requires-Root:no.
  * debian/copyright: added myself to copyright statement for debian/*.
  * debian/patches:
      - 06-fix-spelling-error-in-manpage.patch: Added to fix some spelling.
  * debian/upstream/metadata: Created.
  * debian/watch: added.
.
autopsy (2.24-3) unstable; urgency=medium
.
  * QA upload.
  * debian/control:
      - Added Homepage field.
  * debian/copyright:
      - Update to format standard machine-readable.
      - Updated file.
  * debian/patches:
      - Disabled the 02-sleuthkit.patch because this patch broken the
        path the Sleuthkit commands: ils, icat and mactime.
        (LP: #1482976, LP: #1645312)
.
autopsy (2.24-2) unstable; urgency=low
.
  [ Adam Borowski ]
  * QA upload.
  * Orphan the package. Closes: #809843
.
  [ Jari Aalto ]
  * Remove deprecated dpatch and upgrade to packaging format "3.0 quilt".
  * Update to Standards-Version to 3.9.3 and debhelper to 9.
.
autopsy (2.24-1.1) unstable; urgency=medium
.
  * Non-maintainer upload.
  * Use "find -perm /x" instead of "find -perm +x". Closes: #803030
.
autopsy (2.24-1) unstable; urgency=low
.
  * New upstream release
.
autopsy (2.23-2) unstable; urgency=low
.
  * Rebuilt package because prior version was improperly built (no diff file)
  * Updated to standard 3.8.4
  * Package is lintian clean
.
autopsy (2.23-1) unstable; urgency=low
.
  * New upstream release.
.
autopsy (2.21-2) unstable; urgency=low
.
  * Rebuilt package for unstable (Closes: #540514)
  * Updated to standard 3.8.3
.
autopsy (2.21-1) experimental; urgency=low
.
  * New upstream release (Closes: #464868)
.
autopsy (2.10-1) unstable; urgency=low
.
  * New upstream release (Closes: #464868)
.
autopsy (2.08-2.1) unstable; urgency=low
.
  * NMU
  * Applied patch to prevent broken Perl check, closes: #479935.
    Thanks to Peter Green <plugwash@p10link.net>.
.
autopsy (2.08-2) unstable; urgency=low
.
  * Patched the code to point directly to ils-sleuthkit, icat-sleuthkit
    and mactime-sleuthkit instead of using original filenames (without
    -sleuthkit) which, due to the alternative system, could point to
    incompatible executables (Closes: #407011)
.
autopsy (2.08-1) unstable; urgency=low
.
  * New upstream release (Closes: #386412)
.
autopsy (2.06-2) unstable; urgency=low
.
  * Patched autopsy executable to add warning when it is not run as root
    (Closes: #344965)
.
autopsy (2.06-1) unstable; urgency=low
.
  * New upstream release
  * Updated package description
.
autopsy (2.05-1) unstable; urgency=high
.
  * New upstream release (Closes: #308990)
.
autopsy (2.04-3) unstable; urgency=low
.
  * Applied patch from Kenny Duffus to refles sstring executable Debian
    name (Closes: #304675)
.
autopsy (2.04-2) unstable; urgency=low
.
  * Applied patch from Kenny Duffus to fix sorter executable path
.
autopsy (2.04-1) unstable; urgency=low
.
  * New upstream release
.
autopsy (2.03-2) unstable; urgency=low
.
  * Patched the code to call 'datastat' instead 'dstat' to reflect changes
    introduced in the latest version of the Sleuthkit Debian package
    (patch provided by Kenny Duffus) (Closes: #291548)
  * Patched the code to use 'md5sum' and 'sha1sum'. Previous version of
    the patch was buggy (the new patch is provided by Kenny Duffus)
    (Closes: #291550)
.
autopsy (2.03-1) unstable; urgency=low
.
  * New upstream release
.
autopsy (2.02-1) unstable; urgency=low
.
  * New upstream release
  * Package is now built using dpatch
.
autopsy (1.75-1) unstable; urgency=low
.
  * New upstream release
.
autopsy (1.71-2) unstable; urgency=low
.
  * Package taken while Lorenzo is waiting to become an official Debian
    mantainer
.
autopsy (1.71-1) unstable; urgency=low
.
  * New upstream release
.
autopsy (1.70-1) unstable; urgency=low
.
  * Initial Release.
parent 26c647b8
The Debian autopsy uses the md5sum executable found in the dpkg package.
Privileges
------------------------------------------------------------------------------
If you run autopsy as a normal user you may encounter some problems due to lack
of privileges: you may not be able to use the default evidence directory
(/var/lib/autopsy/) and you may not be able to mount physical devices.
If you believe that what you're going to do would not require root privileges
you can safely run autopsy using a custom evidence directory (using the '-d'
command line argument). If problems related to permissions arise all the same
then probably what you're doing requires root privileges.
-- Lorenzo Martignoni <martignlo@debian.org>, Sat Jan 14 16:28:06 2006
Customizations
------------------------------------------------------------------------------
There are a few settings in conf.pl that you may want to change.
STIMEOUT: If USE_STIMEOUT is set to 1, then this the server will close
after STIMEOUT seconds of no activity.
CTIMEOUT: The number of seconds to wait before closing a socket.
COOKIES: When USE_COOKIE is set to 1, then all URLs use a random cookie
for authentication. It is stored in the file named ".<PORT>.cookie" in
the Evidence Locker directory, where <PORT> is the port number that is
being used.
LOGGING: When USE_LOG is set to 1, then audit logs are saved to the
case and host directories. There are general logs for the case
and host and then investigator specific ones that are saved in the
'logs' directory of the host. When the USE_NOTES is set to 1, then
the investigator can add comments to a given file, or other object.
The notes are stored in a file in the host 'logs' directory.
-- Mattia Monga <monga@debian.org>, Sun Apr 27 11:16:48 2003
README.txt
TODO.txt
autopsy: package-contains-documentation-outside-usr-share-doc usr/share/autopsy/help/blank.html
autopsy: package-contains-documentation-outside-usr-share-doc usr/share/autopsy/help/caseman.html
autopsy: package-contains-documentation-outside-usr-share-doc usr/share/autopsy/help/data_mode.html
autopsy: package-contains-documentation-outside-usr-share-doc usr/share/autopsy/help/file_category.html
autopsy: package-contains-documentation-outside-usr-share-doc usr/share/autopsy/help/file_mode.html
autopsy: package-contains-documentation-outside-usr-share-doc usr/share/autopsy/help/fs_mode.html
autopsy: package-contains-documentation-outside-usr-share-doc usr/share/autopsy/help/general.html
autopsy: package-contains-documentation-outside-usr-share-doc usr/share/autopsy/help/grep.html
autopsy: package-contains-documentation-outside-usr-share-doc usr/share/autopsy/help/grep_lim.html
autopsy: package-contains-documentation-outside-usr-share-doc usr/share/autopsy/help/hash_db.html
autopsy: package-contains-documentation-outside-usr-share-doc usr/share/autopsy/help/index.html
autopsy: package-contains-documentation-outside-usr-share-doc usr/share/autopsy/help/int_mode.html
autopsy: package-contains-documentation-outside-usr-share-doc usr/share/autopsy/help/menu.html
autopsy: package-contains-documentation-outside-usr-share-doc usr/share/autopsy/help/meta_mode.html
autopsy: package-contains-documentation-outside-usr-share-doc usr/share/autopsy/help/sequencer.html
autopsy: package-contains-documentation-outside-usr-share-doc usr/share/autopsy/help/srch_mode.html
autopsy: package-contains-documentation-outside-usr-share-doc usr/share/autopsy/help/temp.html
autopsy: package-contains-documentation-outside-usr-share-doc usr/share/autopsy/help/timezones.html
autopsy: package-contains-documentation-outside-usr-share-doc usr/share/autopsy/help/tl.html
man/man1/autopsy.1
autopsy (2.24-5) unstable; urgency=medium
* QA upload.
* Ran wrap-and-sort -a.
* debian/rules: migrated to reduced format. Consequently:
- Created debian/autopsy.docs and debian/autopsy.manpages.
* debian/autopsy.lintian-overrides: created.
* debian/control:
- Added VCS fields to use Salsa.
- Reordered fields.
* debian/copyright:
- Updated License paragraphs.
- Updated packaging copyright.
* debian/gbp.conf: created to configure git-buildpackage.
* debian/patches/05-find-perm.patch: added 'Forwarded: not-needed'.
* debian/salsa-ci.yml: created to provide CI tests for Salsa.
-- Francisco Vilmar Cardoso Ruviaro <francisco.ruviaro@riseup.net> Mon, 12 Oct 2020 22:18:51 +0000
autopsy (2.24-4) unstable; urgency=medium
* QA upload.
* Using new DH level format. Consequently:
- debian/compat: removed.
- debian/control: changed from 'debhelper' to 'debhelper-compat' in
Build-Depends field and bumped level to 13.
* debian/control:
- Bumped Standards-Version to 4.5.0.
- Set Rules-Requires-Root:no.
* debian/copyright: added myself to copyright statement for debian/*.
* debian/patches:
- 06-fix-spelling-error-in-manpage.patch: Added to fix some spelling.
* debian/upstream/metadata: Created.
* debian/watch: added.
-- Joao Paulo Lima de Oliveira <jlima.oliveira11@gmail.com> Sat, 06 Jun 2020 13:21:58 -0300
autopsy (2.24-3) unstable; urgency=medium
* QA upload.
* debian/control:
- Added Homepage field.
* debian/copyright:
- Update to format standard machine-readable.
- Updated file.
* debian/patches:
- Disabled the 02-sleuthkit.patch because this patch broken the
path the Sleuthkit commands: ils, icat and mactime.
(LP: #1482976, LP: #1645312)
-- Marcio de Souza Oliveira <m.desouza20@gmail.com> Fri, 16 Jun 2017 04:09:53 +0000
autopsy (2.24-2) unstable; urgency=low
[ Adam Borowski ]
* QA upload.
* Orphan the package. Closes: #809843
[ Jari Aalto ]
* Remove deprecated dpatch and upgrade to packaging format "3.0 quilt".
* Update to Standards-Version to 3.9.3 and debhelper to 9.
-- Adam Borowski <kilobyte@angband.pl> Thu, 04 Aug 2016 08:11:08 +0200
autopsy (2.24-1.1) unstable; urgency=medium
* Non-maintainer upload.
* Use "find -perm /x" instead of "find -perm +x". Closes: #803030
-- Andreas Metzler <ametzler@debian.org> Sun, 20 Dec 2015 14:02:36 +0100
autopsy (2.24-1) unstable; urgency=low
* New upstream release
-- Lorenzo Martignoni <martignlo@debian.org> Sun, 20 Jun 2010 21:04:54 +0200
autopsy (2.23-2) unstable; urgency=low
* Rebuilt package because prior version was improperly built (no diff file)
* Updated to standard 3.8.4
* Package is lintian clean
-- Lorenzo Martignoni <martignlo@debian.org> Mon, 22 Feb 2010 14:59:13 +0100
autopsy (2.23-1) unstable; urgency=low
* New upstream release.
-- Lorenzo Martignoni <martignlo@debian.org> Mon, 22 Feb 2010 12:15:58 +0100
autopsy (2.21-2) unstable; urgency=low
* Rebuilt package for unstable (Closes: #540514)
* Updated to standard 3.8.3
-- Lorenzo Martignoni <martignlo@debian.org> Tue, 08 Dec 2009 10:30:17 +0100
autopsy (2.21-1) experimental; urgency=low
* New upstream release (Closes: #464868)
-- Lorenzo Martignoni <martignlo@debian.org> Tue, 16 Jun 2009 22:46:38 +0200
autopsy (2.10-1) unstable; urgency=low
* New upstream release (Closes: #464868)
-- Lorenzo Martignoni <martignlo@debian.org> Sun, 26 Apr 2009 17:22:17 +0200
autopsy (2.08-2.1) unstable; urgency=low
* NMU
* Applied patch to prevent broken Perl check, closes: #479935.
Thanks to Peter Green <plugwash@p10link.net>.
-- Martin A. Godisch <godisch@debian.org> Sat, 19 Jul 2008 08:25:23 +0200
autopsy (2.08-2) unstable; urgency=low
* Patched the code to point directly to ils-sleuthkit, icat-sleuthkit
and mactime-sleuthkit instead of using original filenames (without
-sleuthkit) which, due to the alternative system, could point to
incompatible executables (Closes: #407011)
-- Lorenzo Martignoni <martignlo@debian.org> Sat, 20 Jan 2007 05:13:15 +0100
autopsy (2.08-1) unstable; urgency=low
* New upstream release (Closes: #386412)
-- Lorenzo Martignoni <martignlo@debian.org> Tue, 17 Oct 2006 05:13:55 +0200
autopsy (2.06-2) unstable; urgency=low
* Patched autopsy executable to add warning when it is not run as root
(Closes: #344965)
-- Lorenzo Martignoni <martignlo@debian.org> Sat, 14 Jan 2006 15:42:09 +0100
autopsy (2.06-1) unstable; urgency=low
* New upstream release
* Updated package description
-- Lorenzo Martignoni <martignlo@debian.org> Sun, 23 Oct 2005 23:59:40 +0200
autopsy (2.05-1) unstable; urgency=high
* New upstream release (Closes: #308990)
-- Lorenzo Martignoni <martignlo@debian.org> Thu, 19 May 2005 23:11:55 +0200
autopsy (2.04-3) unstable; urgency=low
* Applied patch from Kenny Duffus to refles sstring executable Debian
name (Closes: #304675)
-- Lorenzo Martignoni <lorenzo.martignoni@poste.it> Fri, 1 Apr 2005 00:00:33 +0200
autopsy (2.04-2) unstable; urgency=low
* Applied patch from Kenny Duffus to fix sorter executable path
-- Lorenzo Martignoni <lorenzo.martignoni@poste.it> Wed, 30 Mar 2005 20:13:37 +0200
autopsy (2.04-1) unstable; urgency=low
* New upstream release
-- Lorenzo Martignoni <lorenzo.martignoni@poste.it> Sun, 27 Mar 2005 14:23:09 +0200
autopsy (2.03-2) unstable; urgency=low
* Patched the code to call 'datastat' instead 'dstat' to reflect changes
introduced in the latest version of the Sleuthkit Debian package
(patch provided by Kenny Duffus) (Closes: #291548)
* Patched the code to use 'md5sum' and 'sha1sum'. Previous version of
the patch was buggy (the new patch is provided by Kenny Duffus)
(Closes: #291550)
-- Lorenzo Martignoni <lorenzo.martignoni@poste.it> Tue, 25 Jan 2005 23:27:03 +0100
autopsy (2.03-1) unstable; urgency=low
* New upstream release
-- Lorenzo Martignoni <lorenzo.martignoni@poste.it> Fri, 17 Sep 2004 00:04:18 +0200
autopsy (2.02-1) unstable; urgency=low
* New upstream release
* Package is now built using dpatch
-- Lorenzo Martignoni <lorenzo.martignoni@poste.it> Tue, 03 Aug 2004 14:06:42 +0200
autopsy (1.75-1) unstable; urgency=low
* New upstream release
-- Lorenzo Martignoni <lorenzo.martignoni@poste.it> Fri, 28 Nov 2003 19:32:15 +0100
autopsy (1.71-2) unstable; urgency=low
* Package taken while Lorenzo is waiting to become an official Debian
mantainer
-- Mattia Monga <monga@debian.org> Thu, 17 Apr 2003 22:33:36 +0200
autopsy (1.71-1) unstable; urgency=low
* New upstream release
-- Lorenzo Martignoni <lorenzo.martignoni@milug.org> Tue, 15 Apr 2003 19:09:34 +0200
autopsy (1.70-1) unstable; urgency=low
* Initial Release.
-- Lorenzo Martignoni <lorenzo.martignoni@milug.org> Tue, 1 Apr 2003 18:01:22 +0200
Source: autopsy
Section: admin
Priority: optional
Maintainer: Debian QA Group <packages@qa.debian.org>
Build-Depends: debhelper-compat (= 13)
Build-Depends-Indep: sleuthkit (>= 3.0.0)
Standards-Version: 4.5.0
Homepage: https://www.sleuthkit.org/autopsy/
Vcs-Browser: https://salsa.debian.org/debian/autopsy
Vcs-Git: https://salsa.debian.org/debian/autopsy.git
Rules-Requires-Root: no
Package: autopsy
Architecture: all
Depends: binutils,
perl,
sleuthkit (>= 3.0.0),
${misc:Depends}
Description: graphical interface to SleuthKit
The Autopsy Forensic Browser is a graphical interface to the command line
digital forensic analysis tools in The Sleuth Kit. Together, The Sleuth Kit
and Autopsy provide many of the same features as commercial digital forensics
tools for the analysis of Windows and UNIX file systems (NTFS, FAT, FFS,
EXT2FS, and EXT3FS).
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: autopsy
Source: https://www.sleuthkit.org/autopsy/
Files: *
Copyright: 2001-2008 Brian Carrier <carrier@sleuthkit.org>
License: GPL-2+
Files: debian/*
Copyright: 2003 Mattia Monga <monga@debian.org>
2003-2010 Lorenzo Martignoni <martignlo@debian.org>
2008 Martin A. Godisch <godisch@debian.org>
2015 Andreas Metzler <ametzler@debian.org>
2016 Adam Borowski <kilobyte@debian.org>
2016 Jari Aalto <jari.aalto@cante.net>
2017 Marcio de Souza Oliveira <marciosouza@debian.org>
2020 João Paulo Lima de Oliveira <jlima.olivereira11@gmail.com>
2020 Francisco Vilmar Cardoso Ruviaro <francisco.ruviaro@riseup.net>
License: GPL-2
License: GPL-2+
This package is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.
.
This package is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
.
You should have received a copy of the GNU General Public License
along with this program. If not, see <https://www.gnu.org/licenses/>
.
On Debian systems, the complete text of the GNU General
Public License version 2 can be found in "/usr/share/common-licenses/GPL-2".
License: GPL-2
This package is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License.
.
This package is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
.
You should have received a copy of the GNU General Public License
along with this program. If not, see <https://www.gnu.org/licenses/>
.
On Debian systems, the complete text of the GNU General
Public License version 2 can be found in "/usr/share/common-licenses/GPL-2".
usr/bin
usr/share/autopsy
usr/share/autopsy/help
usr/share/autopsy/pict
usr/share/doc/autopsy
var/lib/autopsy
[DEFAULT]
debian-branch = debian/master
pristine-tar = True
[buildpackage]
sign-tags = True
[import-orig]
filter-pristine-tar = True
[pq]
patch-numbers = False
[dch]
multimaint-merge = True
*.pl help pict base/autopsy.base lib /usr/share/autopsy
autopsy /usr/bin
This diff is collapsed.
From: <martignlo@debian.org>
Subject: Update the name of the following Sleuthkit executables: ils, icat, and mactime
diff -urNad autopsy-2.21~/lib/Appview.pm autopsy-2.21/lib/Appview.pm
--- autopsy-2.21~/lib/Appview.pm 2008-09-29 04:42:46.000000000 +0200
+++ autopsy-2.21/lib/Appview.pm 2009-06-16 22:41:19.000000000 +0200
@@ -196,7 +196,7 @@
# identify what type it is
local *OUT;
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/icat' -f $ftype $recflag -o $offset -i $imgtype $img $meta | '$::FILE_EXE' -z -b -"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype $recflag -o $offset -i $imgtype $img $meta | '$::FILE_EXE' -z -b -"
);
my $file_type = Exec::read_pipe_line(*OUT);
close(OUT);
@@ -231,7 +231,7 @@
local *OUT;
Exec::exec_pipe(*OUT,
- "'$::TSKDIR/icat' -f $ftype $recflag -o $offset -i $imgtype $img $meta"
+ "'$::TSKDIR/icat-sleuthkit' -f $ftype $recflag -o $offset -i $imgtype $img $meta"
);
while ($_ = Exec::read_pipe_line(*OUT)) {
diff -urNad autopsy-2.21~/lib/File.pm autopsy-2.21/lib/File.pm
--- autopsy-2.21~/lib/File.pm 2009-02-03 05:26:21.000000000 +0100
+++ autopsy-2.21/lib/File.pm 2009-06-16 22:41:19.000000000 +0200
@@ -1095,7 +1095,7 @@
my $recmode = $File::REC_NO;
local *OUT;
Exec::exec_pipe(*OUT,
- "'$::TSKDIR/ils' -f $ftype -e -o $offset -i $imgtype $img $meta_int");
+ "'$::TSKDIR/ils-sleuthkit' -f $ftype -e -o $offset -i $imgtype $img $meta_int");
while ($_ = Exec::read_pipe_line(*OUT)) {
chop;
next unless ($_ =~ /^$meta/);
@@ -1705,7 +1705,7 @@
local *OUT;
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/ils' -f $ftype -e -o $offset -i $imgtype $img $meta_int"
+"'$::TSKDIR/ils-sleuthkit' -f $ftype -e -o $offset -i $imgtype $img $meta_int"
);
while ($_ = Exec::read_pipe_line(*OUT)) {
chop;
@@ -1726,12 +1726,12 @@
# Get the file type so we can show the thumb nails automatically
if ($recmode == $File::REC_YES) {
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/icat' -f $ftype -r -o $offset -i $imgtype $img $meta | '$::FILE_EXE' -z -b -"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype -r -o $offset -i $imgtype $img $meta | '$::FILE_EXE' -z -b -"
);
}
else {
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/icat' -f $ftype -o $offset -i $imgtype $img $meta | '$::FILE_EXE' -z -b -"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype -o $offset -i $imgtype $img $meta | '$::FILE_EXE' -z -b -"
);
}
@@ -1785,12 +1785,12 @@
# Get the file type
if ($recmode == $File::REC_YES) {
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/icat' -f $ftype -r -o $offset -i $imgtype $img $meta | '$::FILE_EXE' -z -b -"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype -r -o $offset -i $imgtype $img $meta | '$::FILE_EXE' -z -b -"
);
}
else {
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/icat' -f $ftype -o $offset -i $imgtype $img $meta | '$::FILE_EXE' -z -b -"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype -o $offset -i $imgtype $img $meta | '$::FILE_EXE' -z -b -"
);
}
@@ -1893,7 +1893,7 @@
"$Caseman::vol2sname{$vol}: Viewing $fname ($meta) as ASCII");
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/icat' -f $ftype $recflag -o $offset -i $imgtype $img $meta"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype $recflag -o $offset -i $imgtype $img $meta"
);
print "Contents Of File: $fname\n\n\n";
@@ -1905,7 +1905,7 @@
"$Caseman::vol2sname{$vol}: Viewing $fname ($meta) as Hex");
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/icat' -f $ftype $recflag -o $offset -i $imgtype $img $meta"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype $recflag -o $offset -i $imgtype $img $meta"
);
print "Hex Contents Of File: $fname\n\n\n";
@@ -1921,7 +1921,7 @@
"$Caseman::vol2sname{$vol}: Viewing $fname ($meta) as strings");
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/icat' -f $ftype $recflag -o $offset -i $imgtype $img $meta | '$::TSKDIR/srch_strings' -a"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype $recflag -o $offset -i $imgtype $img $meta | '$::TSKDIR/srch_strings' -a"
);
print "ASCII String Contents Of File: $fname\n\n\n\n";
@@ -1989,7 +1989,7 @@
local *OUT;
Exec::exec_pipe(*OUT,
- "'$::TSKDIR/icat' -f $ftype $recflag -o $offset -i $imgtype $img $meta"
+ "'$::TSKDIR/icat-sleuthkit' -f $ftype $recflag -o $offset -i $imgtype $img $meta"
);
# We can't trust the mnt and dir values (since there
@@ -2077,7 +2077,7 @@
# Calculate the MD5 value
local *OUT;
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/icat' -f $ftype $recflag -o $offset -i $imgtype $img $meta | '$::MD5_EXE'"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype $recflag -o $offset -i $imgtype $img $meta | '$::MD5_EXE'"
);
my $md5 = Exec::read_pipe_line(*OUT);
close(OUT);
@@ -2095,7 +2095,7 @@
if ($::SHA1_EXE ne "") {
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/icat' -f $ftype $recflag -o $offset -i $imgtype $img $meta | '$::SHA1_EXE'"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype $recflag -o $offset -i $imgtype $img $meta | '$::SHA1_EXE'"
);
my $sha1 = Exec::read_pipe_line(*OUT);
close(OUT);
@@ -2114,7 +2114,7 @@
if ($sort == $FIL_SORT_STR) {
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/icat' -f $ftype $recflag -o $offset -i $imgtype $img $meta | '$::TSKDIR/srch_strings' -a | '$::MD5_EXE'"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype $recflag -o $offset -i $imgtype $img $meta | '$::TSKDIR/srch_strings' -a | '$::MD5_EXE'"
);
$md5 = Exec::read_pipe_line(*OUT);
close(OUT);
@@ -2127,7 +2127,7 @@
if ($::SHA1_EXE ne "") {
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/icat' -f $ftype $recflag -o $offset -i $imgtype $img $meta | '$::TSKDIR/srch_strings' -a | '$::SHA1_EXE'"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype $recflag -o $offset -i $imgtype $img $meta | '$::TSKDIR/srch_strings' -a | '$::SHA1_EXE'"
);
$sha1 = Exec::read_pipe_line(*OUT);
close(OUT);
@@ -2167,7 +2167,7 @@
# File Type
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/icat' -f $ftype $recflag -o $offset -i $imgtype $img $meta | '$::FILE_EXE' -z -b -"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype $recflag -o $offset -i $imgtype $img $meta | '$::FILE_EXE' -z -b -"
);
my $apptype = Exec::read_pipe_line(*OUT);
close(OUT);
@@ -2187,14 +2187,14 @@
if ($sort == $FIL_SORT_ASC) {
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/icat' -f $ftype $recflag -o $offset -i $imgtype $img $meta"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype $recflag -o $offset -i $imgtype $img $meta"
);
Print::print_output($_) while ($_ = Exec::read_pipe_data(*OUT, 1024));
close(OUT);
}
elsif ($sort == $FIL_SORT_HEX) {
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/icat' -f $ftype $recflag -o $offset -i $imgtype $img $meta"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype $recflag -o $offset -i $imgtype $img $meta"
);
my $offset = 0;
while ($_ = Exec::read_pipe_data(*OUT, 1024)) {
@@ -2205,7 +2205,7 @@
}
elsif ($sort == $FIL_SORT_STR) {
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/icat' -f $ftype $recflag -o $offset -i $imgtype $img $meta | '$::TSKDIR/srch_strings' -a"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype $recflag -o $offset -i $imgtype $img $meta | '$::TSKDIR/srch_strings' -a"
);
Print::print_output($_) while ($_ = Exec::read_pipe_line(*OUT));
close(OUT);
@@ -2267,7 +2267,7 @@
local *OUT_MD5;
Exec::exec_pipe(*OUT_MD5,
-"'$::TSKDIR/icat' -f $ftype -r -o $offset -i $imgtype $img $in | '$::MD5_EXE'"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype -r -o $offset -i $imgtype $img $in | '$::MD5_EXE'"
);
my $md5out = Exec::read_pipe_line(*OUT_MD5);
diff -urNad autopsy-2.21~/lib/Meta.pm autopsy-2.21/lib/Meta.pm
--- autopsy-2.21~/lib/Meta.pm 2008-09-29 04:42:46.000000000 +0200
+++ autopsy-2.21/lib/Meta.pm 2009-06-16 22:41:19.000000000 +0200
@@ -185,7 +185,7 @@
my $recmode = $File::REC_NO;
local *OUT;
Exec::exec_pipe(*OUT,
- "'$::TSKDIR/ils' -f $ftype -e -o $offset -i $imgtype $img $meta_int");
+ "'$::TSKDIR/ils-sleuthkit' -f $ftype -e -o $offset -i $imgtype $img $meta_int");
while ($_ = Exec::read_pipe_line(*OUT)) {
chop;
next unless ($_ =~ /^$meta_int/);
@@ -289,12 +289,12 @@
if ($recmode == $File::REC_YES) {
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/icat' -f $ftype -r -o $offset -i $imgtype $img $meta | '$::FILE_EXE' -z -b -"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype -r -o $offset -i $imgtype $img $meta | '$::FILE_EXE' -z -b -"
);
}
else {
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/icat' -f $ftype -o $offset -i $imgtype $img $meta | '$::FILE_EXE' -z -b -"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype -o $offset -i $imgtype $img $meta | '$::FILE_EXE' -z -b -"
);
}
my $file_type = Exec::read_pipe_line(*OUT);
@@ -313,12 +313,12 @@
# MD5 Value
if ($recmode == $File::REC_YES) {
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/icat' -f $ftype -r -o $offset -i $imgtype $img $meta | '$::MD5_EXE'"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype -r -o $offset -i $imgtype $img $meta | '$::MD5_EXE'"
);
}
else {
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/icat' -f $ftype -o $offset -i $imgtype $img $meta | '$::MD5_EXE'"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype -o $offset -i $imgtype $img $meta | '$::MD5_EXE'"
);
}
@@ -379,12 +379,12 @@
if ($::SHA1_EXE ne "") {
if ($recmode == $File::REC_YES) {
Exec::exec_pipe(*OUT,
-"'$::TSKDIR/icat' -f $ftype -r -o $offset -i $imgtype $img $meta | '$::SHA1_EXE'"
+"'$::TSKDIR/icat-sleuthkit' -f $ftype -r -o $offset -i $imgtype $img $meta | '$::SHA1_EXE'"
);
}
else {
Exec::exec_pipe(*OUT,