chkrootkit and 4.10-prerelease issues?

andy at lewman.com andy at lewman.com
Sat May 1 05:54:10 PDT 2004


Has anyone else seen chkrootkit (version 0.43) on 4.10-prerelease or
later report chfn, chsh, and date as infected?

I built world yesterday, and my nightly chkrootkit reports this on run.
I've replaced the binaries with their 4.9 equivalents, and things don't
report as infected.  I upgrade the 4.9 machine to 4.10, and chkrootkit
reports them as infected again.  

Is this similar to the 5.x issues with chkrootkit?

-- 
Andrew


More information about the freebsd-security mailing list