Re: ignore chkrootkit false positive
2006/8/16, David Siroky <email@example.com>:
My chkrootkit is reporting "INFECTED PORT 465" where is my regular ssmtp
Postfix daemon. I found a lots of discussions about this problem but
everywhere was the last answer "That's OK, you can ignore it". I want
the chkrootkit ignore it. Is there any configuration option for this?
try this command
chkrootkit -p /dir1:/dir2
in this way you check only the dir you want and not all.