[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Xzibit Rootkit



* Jens Schüßler <jgs@trash.net> wrote:
> und ein Bugreport existiert dazu auch schon
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=559696

Ist auch in der neuesten Version in der README.Debian erwähnt:

* FALSE POSITIVES
  Below is a list of packages which are known to set off false alarms in
  rkhunter:

    * hdparm: the string "hdparm" found in the initscripts leads to rkhunter warns
      about possible Xzibit rootkit. Use the RTKT_FILE_WHITELIST option to whitelist
      initscripts stating this string (eg. /etc/init.d/hdparm, /etc/init.d/bootlogd,
      /etc/init.d/checkroot.sh)


Reply to: