[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: chkrootkit and linux 2.6

[On 04 Dec, @07:24, Paul wrote in "Re: chkrootkit and linux 2.6 ..."]
>    I see this same behavior with 2.6.0-test8.  Chkrookit comes up with 42
>    processes possibly caused by LKM rootkit.  I would have 69 processes
>    running with 42 of them owned by root.  When I boot back to 2.4.23, it
>    comes up with the 4 mentioned in the bug.  I'm no Linux master by any
>    means, but I'm just guessing that being owned by root is the kicker in
>    this instance.  Either that, or I'm screwed ;)

a 'chkrootkit -x lkm' was helpfull for me in this case - looks like the
lkm test is fooled by threaded applications: xmms, named, etc...

On my laptop killing X was enough the shut chkrootkit up:
with X: 2 hidden processes
without: none

grtz Miek

Reply to: