[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: chkrootkit and lkm



On Tue, Nov 25, 2003 at 06:42:21PM -0600, Adam Heath scribbled:
[snip]
> > are however four processes (ksoftirqd_CPU0, kswapd, bdflush, kupdated)
> > in existence that show a PID of 0.
> > Am I right to assume that this is not the lkm kit, but rather some
> > weiredness in PID assignment?
> >
> > The same PID thing is happening on my testing/unstable laptop -
> > compromised as well or something else amiss in the distro, maybe related
> > to the server break ins?
> 
> Are you running 2.6, or the backported TLS patches on 2.4?
it seems it's not only there. I think it's also the -aa kernels which show
this behavior (that would include 2.4.23rcX).

marek

Attachment: signature.asc
Description: Digital signature


Reply to: