chkrootkit and 4.10-prerelease issues?
andy at lewman.com
andy at lewman.com
Sat May 1 05:54:10 PDT 2004
Has anyone else seen chkrootkit (version 0.43) on 4.10-prerelease or
later report chfn, chsh, and date as infected?
I built world yesterday, and my nightly chkrootkit reports this on run.
I've replaced the binaries with their 4.9 equivalents, and things don't
report as infected. I upgrade the 4.9 machine to 4.10, and chkrootkit
reports them as infected again.
Is this similar to the 5.x issues with chkrootkit?
--
Andrew
More information about the freebsd-security
mailing list