Public bug reported:
Binary package hint: chkrootkit
This program detects falsely an infection on port 6667. This is the
case with an IRCD running on port 6667 being detected as bindshell.
This is a bug, but also could the documentation on false positives be
amended to include the info about
Perhaps a separate optional -doc package for possible server-related
false positives, or perhaps a chkrootkit.SERVER-FALSE-POSITIVES doc?
Just an opinion.
Thank you though for quickly processing this bug report.
--
False Positive: IRCDs running on port 6667
