Your message dated Fri, 22 Apr 2005 11:45:23 -0700
with message-id <[EMAIL PROTECTED]>
and subject line fixed by older upload
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 22 Jul 2004 20:23:10 +0000
>From [EMAIL PROTECTED] Thu Jul 22 13:23:10 2004
Return-path: <[EMAIL PROTECTED]>
Received: from fee.tlt.psu.edu [128.118.102.201] 
        by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
        id 1Bnk5u-0006oi-00; Thu, 22 Jul 2004 13:23:10 -0700
Received: by fee.tlt.psu.edu (Postfix, from userid 81)
        id 4D8F9142C8F; Thu, 22 Jul 2004 16:24:36 -0400 (EDT)
Received: from 128.118.102.201
        (SquirrelMail authenticated user asv);
        by fee.tlt.psu.edu with HTTP;
        Thu, 22 Jul 2004 16:24:36 -0400 (EDT)
Message-ID: <[EMAIL PROTECTED]>
Date: Thu, 22 Jul 2004 16:24:36 -0400 (EDT)
Subject: Chkrootkit 0.43 False Pos kernel 2.6.7
From: "Alex Valentine" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
User-Agent: SquirrelMail/1.4.3a
X-Mailer: SquirrelMail/1.4.3a
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
        (1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-5.1 required=4.0 tests=BAYES_44,HAS_PACKAGE 
        autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 


Package: chkrootkit
Version: 0.43

After upgrading to kernel-image-2.6.7-1-68 on two different machines, I'm
experiencing false positives on both machines.

Machine A:

harpua:/home/asv# chkrootkit -q
You have    63 process hidden for readdir command
You have    63 process hidden for ps command
Warning: Possible LKM Trojan installed

Machine B:

You have    17 process hidden for readdir command
You have    17 process hidden for ps command
Warning: Possible LKM Trojan installed

--=20
***********************************************
Alex Valentine  [EMAIL PROTECTED]
LionShare Project http://lionshare.its.psu.edu
Jabber: [EMAIL PROTECTED]       AIM: asv108vv
***********************************************

---------------------------------------
Received: (at 222179-done) by bugs.debian.org; 22 Apr 2005 18:45:26 +0000
>From [EMAIL PROTECTED] Fri Apr 22 11:45:25 2005
Return-path: <[EMAIL PROTECTED]>
Received: from doit.org (maui.doit.org) [199.184.188.17] (postfix)
        by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
        id 1DP39Z-0001cU-00; Fri, 22 Apr 2005 11:45:25 -0700
Received: from localhost.localdomain (c-24-20-136-228.hsd1.or.comcast.net 
[24.20.136.228])
        by maui.doit.org (Postfix) with ESMTP id 67858CD910
        for <[EMAIL PROTECTED]>; Fri, 22 Apr 2005 11:45:25 -0700 (PDT)
Received: by localhost.localdomain (Postfix, from userid 1000)
        id DD7BDE2EB1; Fri, 22 Apr 2005 11:45:23 -0700 (PDT)
To: [EMAIL PROTECTED]
Subject: fixed by older upload
From: lmoore <[EMAIL PROTECTED]>
Date: Fri, 22 Apr 2005 11:45:23 -0700
Message-ID: <[EMAIL PROTECTED]>
User-Agent: Gnus/5.090016 (Oort Gnus v0.16) XEmacs/21.4 (Jumbo Shrimp)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
        (1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00 autolearn=no 
        version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

the hidden process bugs for 2.6 seem to have been fixed with chkrootkit
0.44.

-l


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to