From owner-freebsd-security@FreeBSD.ORG  Fri Oct 28 11:53:20 2005
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
X-Original-To: freebsd-security@freebsd.org
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 6F51F16A420
	for <freebsd-security@freebsd.org>;
	Fri, 28 Oct 2005 11:53:20 +0000 (GMT)
	(envelope-from cordeiro@cert.br)
Received: from woq.cert.br (woq.cert.br [200.160.7.2])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 6A07143D4C
	for <freebsd-security@freebsd.org>;
	Fri, 28 Oct 2005 11:53:19 +0000 (GMT)
	(envelope-from cordeiro@cert.br)
Received: from luinil.cert.br (luinil.cert.br [200.160.7.67])
	by woq.cert.br (Postfix) with ESMTP id BF86D224966
	for <freebsd-security@freebsd.org>;
	Fri, 28 Oct 2005 09:53:18 -0200 (BRST)
Received: from luinil.cert.br (localhost.cert.br [127.0.0.1])
	by luinil.cert.br (Postfix) with ESMTP id 7B6EE5C03E
	for <freebsd-security@freebsd.org>;
	Fri, 28 Oct 2005 11:51:49 +0000 (UTC)
Received: by luinil.cert.br (Postfix, from userid 1400)
	id 5A8575C089; Fri, 28 Oct 2005 11:51:49 +0000 (UTC)
From: Luiz Eduardo Roncato Cordeiro <cordeiro@cert.br>
Organization: Computer Emergency Response Team Brazil
To: freebsd-security@freebsd.org
Date: Fri, 28 Oct 2005 09:51:47 -0200
User-Agent: MUA
X-URL: http://www.cert.br
MIME-Version: 1.0
Content-Type: text/plain;
  charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200510280951.48910.cordeiro@cert.br>
X-Virus-Scanned: ClamAV using ClamSMTP
Subject: chkrootkit 0.46 reboots FreeBSD 5.4-RELEASE-p8
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Oct 2005 11:53:20 -0000

Hello,

Please, don't use chkrootkit 0.46 on production machines.
The "chkproc" process sends a SIGXFSZ (25) signal to init,
that interprets this signal as a "disaster" and reboots 
after a 30s sleep.

I'm contacting the chkrootkit maintainer to fix this
problem.

Sorry,
Cordeiro