RE: chkrootkit and lkm
Le mer 26/11/2003 à 01:17, Michael Bordignon a écrit :
> > I was just running 'chkrootkit' and came across this warning:
> >
> > > Checking `lkm'... You have 4 process hidden for ps command
> > > Warning: Possible LKM Trojan installed
>
> I have the same problem.. I believe it's a bug in chkrootkit
>
Do you stop the services before running chkrootkit?
It can append that chkrootkit report false positive on machine still
running services. I had the experience with exim. When I stop it I had
no false positive...
>
> Michael
>
Reply to: