[ossec-list] Suckit rootkit

[Mike Sievers]

Hi List,

on my opensuse 12.1 I found:
Trojaned version of file '/sbin/init' detected. Signature used: 'HOME'
(Suckit rootkit).
I hope this is false positive, isn´t it?
And some alerts like this:
File '/dev/.sysconfig/network/config-lo' present on /dev. Possible hidden
file.

???