[solution] chkrootkit reports infected files

Yonatan Bokovza Yonatan at xpert.com
Sun Aug 24 04:55:16 PDT 2003


> -----Original Message-----
> From: Nelson Murilo [mailto:nelson at pangeia.com.br]
> Sent: Sunday, August 24, 2003 14:51
> To: Yonatan Bokovza
> Cc: freebsd-security at freebsd.org; cordeiro at luinil.nic.br; 
> jessen at nic.br
> Subject: Re: [solution] chkrootkit reports infected files
> 
> 
> 
> Hi Yonatan,
> 
> I fixed all bugs in 5.x in 0.42 (next release), I look for
> your patch for chk_vdir.
> 
> Thanks a lot for your interest in chkrootkit,

The difference is in chk_vdir:

- if [ -r ${CMD} ]; then
+ if [ ! -r ${CMD} ]; then

As things stands now, this returns NOT_FOUND if the file
is readable, and errors out if the file doesn't exist, or isn't
readable.


More information about the freebsd-security mailing list