Hi All

Just upgraded to 1.3.8 now I'm getting Xzibit Rootkit.  I'm  sure it is a false 
positive,  how do I clear this error?

Thanks

Joe


>From output:

Rootkit checks...
    Rootkits checked : 254
    Possible rootkits: 1
    Rootkit names    : Xzibit Rootkit

>From log:

# less rkhunter.log|grep Xzibit
[09:27:21] Checking for Xzibit Rootkit...
[09:27:21] Xzibit Rootkit                                    [ Not found ]
[09:27:50]          Found string 'hdparm' in file '/etc/rc.d/rc.sysinit'. 
Possible rootkit: Xzibit Rootkit
[09:28:23] Rootkit names    : Xzibit Rootkit


>From file:

 cat   /etc/rc.d/rc.sysinit |grep hdparm
# after installing the hdparm-RPM. If you need different hdparm parameters
if [ -x /sbin/hdparm ]; then
                      action $"Setting hard drive parameters for 
${disk[$device]}: "  /sbin/hdparm ${HDFLAGS[$device]} /dev/${disk[$device]}

------------------------------------------------------------------------------
AppSumo Presents a FREE Video for the SourceForge Community by Eric 
Ries, the creator of the Lean Startup Methodology on "Lean Startup 
Secrets Revealed." This video shows you how to validate your ideas, 
optimize your ideas and identify your business strategy.
http://p.sf.net/sfu/appsumosfdev2dev
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to