On 06/07/2012 09:34 AM, Heinz Diehl wrote:
On 07.06.2012, Beartooth wrote:
One tells me, on several machines, that /sbin/init is infected
with the Suckit rootkit; the other says not. Is there a way to tell
whether I'm seeing a false positive or a false negative?
Seems to be a bug in chkrootkit..
Search the archives for Alan Cox's reply to same
issue I had raised a few weeks ago.
The bottom line: There is no Suckit rootkit. It is
just a remnant in the chkrootkit ruleset which is
not valid in the case of /sbin/init.
--
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
