Re: Chkrootkit reports infection

["Nikita V. Youshchenko" <yoush@cs.msu.su>]

> I've recently updated to sarge.
> 
> When chkrootkit runs daily, I get a (presumed) false positive:
> 
> # chkrootkit -q
> 
> /usr/lib/mindi/rootfs/proc/.keep /usr/lib/mindi/rootfs/root/.profile
> 
> I assume that this is due to the presence of "dotfiles" installed by
> mindi. I've tried suppressing this output using a "grep" statement, but
> chkrootkit returns a non-zero value, and I also get this message daily.
> 
> Is there a way of turning this off without writing a separate shell
> script?

You may stop daily mails by running dpkg-reconfigure chkrootkit and
disabling daily runs.