Re: chkrootkit: false positive
I'm olso reciving an error message from chkrootkit but refering to a lkm trojan, for
what I have seen its seems to be an error from chkrootkit.
Cheers,
rak
On Tue, Jul 12, 2005 at 02:53:34PM -0400, Lorenzo Taylor wrote:
> I am running orville-write on my Debian Sid system, which, as far as I can tell,
> is the only package that provides /usr/bin/write. Every day, I get an email
> from Cron which presents the output of chkrootkit. It shows me a list of files
> and also a message that says:
>
> Checking `write'... INFECTED
>
> I know that this is a false positive, since I have reinstalled the package with
> no change in this message. Should I file a bug against chkrootkit or
> orville-write?
>
> Lorenzo
> --
> -----BEGIN GEEK CODE BLOCK-----
> Version: 3.12
> GCS d- s:+ a- C+++ UL++++ P+ L+++ E- W++ N o K- w---
> O M V- PS+++ PE Y+ PGP++ t++ 5+ X+ R tv-- b++ DI-- D+
> G e* h---- r+++ y+++
> ------END GEEK CODE BLOCK------
>
>
> --
> To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
Reply to: