On Tue, Apr 5, 2011 at 5:38 AM, Mick <michaelkintz...@gmail.com> wrote: > The warnings were generated last time the cron job run chkrootkit. I > think that the box was rather busy in the middle of emerging stuff at > the time, so I wonder if that had something to do with it.
I was actually thinking about exactly that situation. I use emerge -j and make -j9 and can have dozens (hundreds?) or processes starting and stopping all the time. If there's even a slight delay between when ps runs and when chkproc checks /proc for itself I can see how there might be a couple discrepancies. The fact that they don't show later I think is a good sign that there's nothing permanently hidden by a modified ps binary.
