Fedora and chkrootkit

Sam Barnett-Cormack s.barnett-cormack at lancaster.ac.uk
Mon Dec 15 02:19:30 UTC 2003


That particular one can occur if certain binaries aren't fully stripped.
If they aren't stripped or optimised, or have debugging info in, then
they trigger that test.

On Mon, 15 Dec 2003, Pedro Fernandes Macedo wrote:

> I've just run chkrootkit on a fedora machine I just installed and this
> line is kinda worrying me..
> Searching for ZK rootkit default files and dirs... Possible ZK rootkit
> installed
>
> The chkrootkit I'm using is the version available through fedora.us...
>
> I've tested chkrootkit on my personal machine and I also got the same
> message... Is this a bug in chkrootkit?
> Both machines are firewalled (one of them is behind a hardware firewall
> , with no ports open and the other has iptables configured only to
> accept ssh , amanda backup and nfs).
> Any ideas on what's going on?
>
>
> Pedro Macedo
>
>
> --
> fedora-list mailing list
> fedora-list at redhat.com
> To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
>

-- 

Sam Barnett-Cormack
Software Developer                           |  Student of Physics & Maths
UK Mirror Service (http://www.mirror.ac.uk)  |  Lancaster University





More information about the fedora-list mailing list