[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

RE: chkrootkit and lkm

Umm, I have the same problem.

If I kill Exim and Spamassassin no hidden processes reported.

Under normal load sometimes get 1-7 hidden processes.   Was is a state of
panic but it does appear that Exim and Spamassassin combined do create false

Can this be fixed?


Le mer 26/11/2003 à 01:17, Michael Bordignon a écrit :
> > I was just running 'chkrootkit' and came across this warning:
> >
> > > Checking `lkm'... You have     4 process hidden for ps command
> > > Warning: Possible LKM Trojan installed
> I have the same problem.. I believe it's a bug in chkrootkit

Do you stop the services before running chkrootkit?

It can append that chkrootkit report false positive on machine still
running services. I had the experience with exim. When I stop it I had
no false positive...

> Michael

To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact

Reply to: