chrootkit and false LKM positive

To: debian-security@lists.debian.org
Subject: chrootkit and false LKM positive
From: Yannick Roehlly <yannick.roehlly@free.fr>
Date: Tue, 27 Jan 2004 12:19:41 +0100
Message-id: <[🔎] 8765exocz6.fsf@free.fr>

Hi!

The false LKM positives seem to result from a bug in chkrootkit which is
not aware of the new threading model of 2.6 kernel.

See bug #222179.

Yannick

Reply to:

Follow-Ups:
- Re: chrootkit and false LKM positive
  - From: Thiago Ribeiro <offs@fatea.br>
- Re: chrootkit and false LKM positive
  - From: lupe@lupe-christoph.de (Lupe Christoph)

Prev by Date: Re: LKM
Next by Date: Re:
Previous by thread: Vanishing "/etc/modules" ...
Next by thread: Re: chrootkit and false LKM positive
Index(es):
- Date
- Thread