On Thursday, 2010-08-19 at 08:02:45 -, Maxime wrote:
> I can confirm the issue on Lucid. It's probably related to an upstart
> update to 0.6.5-7.
> [...]
> Searching for Suckit rootkit... Warning:
> /sbin/init INFECTED
> [...]
> # strings /sbin/init | egrep HOME
>
On Wednesday, 2010-04-28 at 18:09:39 -, Chuck Short wrote:
> can you try to reproduce this on lucid please?
Searching for Suckit rootkit... nothing
found
I believe the false positive was gone for quite a while, probably due to
changes in init.
Lupe Christoph
--
|
On Monday, 2009-10-19 at 13:18:45 -, Chuck Short wrote:
> Thanks for the bug report. I was wondering if you have any suggestion to
> improve it.
Well, as there are some finer tests on the page I mentioned, what about
implementing them in chkrootkit?
Lupe Christoph
--
| There is no substitute
