Package: chkrootkit
Version: 0.48-5
Severity: wishlist
I suggest:
Install a standard directory like
/usr/share/chkrootkit/files-excluded/. Any files in that directory
would contain names of files which should be excluded from chkrootkit
reports. These would be in addition to any files named with "-e"
options. Likewise for /usr/share/chkrootkit/dirs-excluded/. (An
option could be added to ignore those directories.)
Some Debian packages install files that generate false positives. For
each such package, invite the maintainer to install a file in the
above directory containing the name of the offending file. For
example, the slice package would install a file
/usr/share/chkrootkit/files-excluded/slice.
Alternatively, any file installed by a Debian package should be
excluded. The names could be cached by a chkrootkit config script
called in postinst or later.
Preferably, check the md5sum of any excluded file from a Debian package.
Ideally, filenames should be null separated.
- Jim Van Zandt
-- System Information:
Debian Release: lenny/sid
APT prefers unstable
APT policy: (990, 'unstable'), (500, 'oldstable'), (500, 'testing'), (500,
'stable')
Architecture: i386 (i686)
Kernel: Linux 2.6.25 (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash
Versions of packages chkrootkit depends on:
ii binutils 2.18.1~cvs20080103-7 The GNU assembler, linker and bina
ii debconf [debconf-2. 1.5.23 Debian configuration management sy
ii libc6 2.7-13 GNU C Library: Shared libraries
ii net-tools 1.60-19 The NET-3 networking toolkit
ii procps 1:3.2.7-9 /proc file system utilities
chkrootkit recommends no packages.
chkrootkit suggests no packages.
-- debconf information excluded
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
