Re: chkrootkit and linux 2.6

To: debian-security@lists.debian.org
Cc: miekg@atoom.net
Subject: Re: chkrootkit and linux 2.6
From: Paul Norris <paul@sanjuro.org>
Date: Thu, 04 Dec 2003 01:24:32 -0500
Message-id: <[🔎] 1070519072.785.4.camel@localhost>
Reply-to: paul@sanjuro.org
In-reply-to: <[🔎] 20031202173231.GA11329@atoom.net>

I see this same behavior with 2.6.0-test8. Chkrookit comes up with 42 processes possibly caused by LKM rootkit. I would have 69 processes running with 42 of them owned by root. When I boot back to 2.4.23, it comes up with the 4 mentioned in the bug. I'm no Linux master by any means, but I'm just guessing that being owned by root is the kicker in this instance. Either that, or I'm screwed ;)

-Paul Norris

Reply to:

Follow-Ups:
- Re: chkrootkit and linux 2.6
  - From: Miek Gieben <miekg@atoom.net>

References:
- chkrootkit and linux 2.6
  - From: Miek Gieben <miekg@atoom.net>

Prev by Date: Re: When will kernel-image-2.4.23 be available ?
Next by Date: Re: chkrootkit and linux 2.6
Previous by thread: Re: chkrootkit and linux 2.6
Next by thread: Re: chkrootkit and linux 2.6
Index(es):
- Date
- Thread