Date: Fri, 6 Jun 2003 12:00:26 -0700 From: Joshua Oreman <oremanj@webserver.get-linux.org> To: xcas@cox.net Cc: questions@freebsd.org Subject: Re: chkrootkit-0.40 & FreeBSD 5.1 Message-ID: <20030606190026.GA45315@webserver.get-linux.org> In-Reply-To: <20030606110904.T38001@localhost.bsd-unix.org> References: <20030606110904.T38001@localhost.bsd-unix.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Jun 06, 2003 at 11:21:47AM -0700 or thereabouts, xcas@cox.net seemed to write: > Is there a problem with 'chkrootkit-0.40' on 5.x? It tells me that some of > the files are infected (I know for a fact that they're not).. > > Files reported as infected: > /usr/bin/chfn > /usr/bin/chsh > /bin/date > /bin/ls > /bin/ps > > localhost# uname -a > FreeBSD localhost.tuxsux.org 5.1-RELEASE FreeBSD 5.1-RELEASE #0: Wed Jun 4 06:09:58 MST 2003 > cas@localhost.tuxsux.org:/usr/obj/usr/src/sys/KADAFI i386 Yes. It gives false positives for these 5 commands. -- Josh > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030606190026.GA45315>