Re: chkrootkit and linux 2.6

To: Hideki Yamane <henrich@iijmio-mail.jp>
Cc: "debian-security@lists.debian.org" <debian-security@lists.debian.org>
Subject: Re: chkrootkit and linux 2.6
From: Miek Gieben <miekg@atoom.net>
Date: Wed, 3 Dec 2003 10:05:10 +0100
Message-id: <[🔎] 20031203090510.GA22093@atoom.net>
In-reply-to: <[🔎] 200312030630.hB36U2EH005244@mms-r01.iijmio.jp>
References: <[🔎] 20031202173231.GA11329@atoom.net> <[🔎] Pine.LNX.4.44.0312021353490.1835-100000@agni.phys.iit.edu> <[🔎] 200312030630.hB36U2EH005244@mms-r01.iijmio.jp>

[On 03 Dec, @07:28, Hideki wrote in "Re: chkrootkit and linux 2.6 ..."]
> Hi,
> 
>   Miek, if you are using kernel 2.6-test6 or newer, maybe not 
>  worry about brk() bug. this kernel vulnerability effects under
>  2.4.22 and 2.6-test5.

I know, thanks. I'm running test11 right now and I closely followed
the test releases starting from test6.

I more and more start to think this is a bug in chkrootkit - on
busier systems more processes are hidded than on quiet systems.

I'll try it on 2.4 and see what happens,

grtz Miek

Reply to:

Follow-Ups:
- Re: chkrootkit and linux 2.6
  - From: Jeroen van Wolffelaar <jeroen@wolffelaar.nl>

References:
- chkrootkit and linux 2.6
  - From: Miek Gieben <miekg@atoom.net>
- Re: chkrootkit and linux 2.6
  - From: David Ehle <ehle@agni.phys.iit.edu>
- Re: chkrootkit and linux 2.6
  - From: Hideki Yamane <henrich@iijmio-mail.jp>

Prev by Date: Re: Will 2.4.20 Source be patched for the latest kernel vulnerability?
Next by Date: Re: chkrootkit and linux 2.6
Previous by thread: Re: chkrootkit and linux 2.6
Next by thread: Re: chkrootkit and linux 2.6
Index(es):
- Date
- Thread