found 357445 1.8.1-8 thanks On Sat, 25 Mar 2006 14:14:22 -0500 Steve M. Robbins wrote:
> On Fri, Mar 17, 2006 at 12:40:03PM +0000, Julian Gilbey wrote: [...] > > geomview puts a number of files in /usr/lib/geomview with names such > > as .geomview-sweep. chkrootkit flags these up as being suspicious, > > and indeed it is unusual to have dot-files installed by a package. > > I agree, it is unusual. Geomview is ancient code and not > really maintained anymore. However, it is useful to some. It does *not* seem to be unmaintained: according to its official website[1], a new pre-release testing package was out in october 2006. Hence there seems to be some activity, even though the pace is not very fast... [1] http://www.geomview.org/ > > > Any chance of changing this? > > I'm not a fan of changing this unilaterally for debian and, since > geomview isn't maintained, I don't imagine it will be changed. I think that this bug is really annoying: I installed geomview yesterday and chkrootkit immediately complained in its nightly check. Will it complain every night? I'm afraid it will. I think that fixing this bug would be very useful, in order to avoid that each and every user who installs both chkrootkit and geomview gets this false positive alert. IMHO, the way to go is fixing this for Debian and then forwarding the patch to upstream, so that it can be integrated in version 1.8.2 Please think about it. -- But it is also tradition that times *must* and always do change, my friend. -- from _Coming to America_ ..................................................... Francesco Poli . GnuPG key fpr == C979 F34B 27CE 5CD8 DC12 31B5 78F4 279B DD6D FCF4
pgpK7sQCL4HE9.pgp
Description: PGP signature
