On Sun, Mar 16, 2008 at 06:29:10PM -0700, Matt Taggart wrote: > I have written a patch that allows chkrootkit to exclude false positives > from the list of reported dot files, and added a warning to the README of > when you would want to use this feature and why it is sometimes needed to > result in a more secure system. I think that it should hopefully be > acceptable to upstream.
I guess the best option is to exclude them only if their are zero sized -- GPG-Key: 0xA3FD0DF7 - 9F73 032E EAC9 F7AD 951F 280E CB66 8E29 A3FD 0DF7 Debian User and Developer. Homepage: www.foolab.org
signature.asc
Description: Digital signature