[Bug 845625] New: An alert [false positive] issued by chkrootkit.
https://bugzilla.novell.com/show_bug.cgi?id=845625 https://bugzilla.novell.com/show_bug.cgi?id=845625#c0 Summary: An alert [false positive] issued by chkrootkit. Classification: openSUSE Product: openSUSE 12.3 Version: Final Platform: x86-64 OS/Version: openSUSE 12.3 Status: NEW Severity: Normal Priority: P5 - None Component: Security AssignedTo: security-team@suse.de ReportedBy: rhus@bol.com.br QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Firefox/24.0 An alert issued by chkrootkit. chkrootkit returned to me a warning: "Searching for Suckit rootkit... Warning: /sbin/init INFECTED". I typed in the terminal: rpm-qfV /sbin/init and it returned nothing. With systemd, /sbin/init is just a symlink to systemd. Maybe this causes the false alert by chkrotkit? I installed also the "rkhunter" and returned the following: Suckit Rootkit [ Not found ]. System checks summary ===================== File properties checks... Required commands check failed Files checked: 180 Suspect files: 3 Rootkit checks... Rootkits checked : 306 Possible rootkits: 0 Applications checks... Applications checked: 4 Suspect applications: 0 That's it! Reproducible: Always Steps to Reproduce: 1. 2. 3. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=845625
https://bugzilla.novell.com/show_bug.cgi?id=845625#c1
Marcus Meissner
participants (1)
-
bugzilla_noreply@novell.com