I can repro this on a 2.6 box with uml hosts running - it looks like some unix domain socket is changing while being viewed ( according to a thread on debian security ) which apparently indicates there isn't a problem... which might explain why I can't see a bug against that.
illusion:/var/log# /usr/lib/tiger/scripts/check_rootkit Configuring... Will try to check using config for 'i686' running Linux 2.6.11.11-skas3-v9-pre2... --CONFIG-- [con005c] Using configuration files for Linux 2.6.11.11-skas3-v9-pre2. Using configuration files for generic Linux 2. # Performing check for rookits... # Running chkrootkit (/usr/sbin/chkrootkit) to perform # further checks... warning, got bogus unix line. warning, got bogus unix line. warning, got bogus unix line. warning, got bogus unix line. warning, got bogus unix line. warning, got bogus unix line. [...snip repeated lines...] -A -- Andrew Pounce - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Stop searching forever. Happiness is unattainable. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
