Date: Sun, 2 May 2004 02:35:44 +1000 From: "Mark Picone" <wts666@iprimus.com.au> To: <freebsd-security@freebsd.org> Subject: RE: chkrootkit and 4.10-prerelease issues? Message-ID: <408C4956002AA4DC@> (added by postmaster@iprimus.com.au) In-Reply-To: <20040501125409.GA65876@phobos.osem.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Probably because chrootkit doesn't know u builtworld and is still checking whether chfn & chsh are infected against 4.9 MD5 Sums, I would suggest reading the manual and seeing how to fix this or just reinstall it. - Mark -----Original Message----- From: owner-freebsd-security@freebsd.org [mailto:owner-freebsd-security@freebsd.org] On Behalf Of andy@lewman.com Sent: Saturday, 1 May 2004 10:54 pm To: freebsd-security@freebsd.org Subject: chkrootkit and 4.10-prerelease issues? Has anyone else seen chkrootkit (version 0.43) on 4.10-prerelease or later report chfn, chsh, and date as infected? I built world yesterday, and my nightly chkrootkit reports this on run. I've replaced the binaries with their 4.9 equivalents, and things don't report as infected. I upgrade the 4.9 machine to 4.10, and chkrootkit reports them as infected again. Is this similar to the 5.x issues with chkrootkit? -- Andrew _______________________________________________ freebsd-security@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?408C4956002AA4DC>