Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 1 May 2004 08:54:09 -0400
From:      andy@lewman.com
To:        freebsd-security@freebsd.org
Subject:   chkrootkit and 4.10-prerelease issues?
Message-ID:  <20040501125409.GA65876@phobos.osem.com>

next in thread | raw e-mail | index | archive | help
Has anyone else seen chkrootkit (version 0.43) on 4.10-prerelease or
later report chfn, chsh, and date as infected?

I built world yesterday, and my nightly chkrootkit reports this on run.
I've replaced the binaries with their 4.9 equivalents, and things don't
report as infected.  I upgrade the 4.9 machine to 4.10, and chkrootkit
reports them as infected again.  

Is this similar to the 5.x issues with chkrootkit?

-- 
Andrew



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040501125409.GA65876>