diff --git a/pkgs/tools/security/chkrootkit/default.nix b/pkgs/tools/security/chkrootkit/default.nix
new file mode 100644
index 000000000000..e7545ac8cd6a
--- /dev/null
+++ b/pkgs/tools/security/chkrootkit/default.nix
@@ -0,0 +1,16 @@
+{stdenv, fetchurl}:
+  
+stdenv.mkDerivation {
+  name = "chkrootkit-0.48";
+  
+  src = fetchurl {
+    url = ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz;
+    sha256 = "1yzid6bw092nf8k83y1119kc4ns7r0l3zsfah5xal8kh19ad7cxl";
+  };
+
+  installPhase = "
+    ensureDir $out/sbin
+    cp check_wtmpx chkdirs chklastlog chkproc chkrootkit chkutmp chkwtmp ifpromisc strings-static $out/sbin
+  ";
+  
+}
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 0f0d0539839e..463144541f35 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -365,6 +365,10 @@ rec {
     inherit fetchurl stdenv;
   };
 
+  chkrootkit = import ../tools/security/chkrootkit {
+    inherit fetchurl stdenv;
+  };
+
   cksfv = import ../tools/networking/cksfv {
     inherit fetchurl stdenv;
   };