[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: chrootkit and false LKM positive



Le mar 27/01/2004 à 13:34, Lupe Christoph a écrit :
> On Tuesday, 2004-01-27 at 12:19:41 +0100, Yannick Roehlly wrote:
> 
> > The false LKM positives seem to result from a bug in chkrootkit which is
> > not aware of the new threading model of 2.6 kernel.
> 
> > See bug #222179.
> 
> Not exactly true. This is also in recent 2.4.x kernels. See my other
> mail. I'm running 2.4.23.

I had false positive as well with busy servers running Exim (and on 2.4
kernels)

> 
> Lupe Christoph
> -- 
> | lupe@lupe-christoph.de       |           http://www.lupe-christoph.de/ |
> | "Violence is the resort of the violent" Lu Tze                         |
> | "Thief of Time", Terry Pratchett                                       |
> 



Reply to: