Re: Xzibit Rootkit
* Jens Schüßler <jgs@trash.net> wrote:
> und ein Bugreport existiert dazu auch schon
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=559696
Ist auch in der neuesten Version in der README.Debian erwähnt:
* FALSE POSITIVES
Below is a list of packages which are known to set off false alarms in
rkhunter:
* hdparm: the string "hdparm" found in the initscripts leads to rkhunter warns
about possible Xzibit rootkit. Use the RTKT_FILE_WHITELIST option to whitelist
initscripts stating this string (eg. /etc/init.d/hdparm, /etc/init.d/bootlogd,
/etc/init.d/checkroot.sh)
Reply to: