F12 Rkhunter, Have I a rootkit? SOLVED

[John Horne]

On Tue, 2010-01-05 at 11:35 -1000, David Burns wrote:
> On Tue, Jan 5, 2010 at 7:46 AM, Frank Murphy (Frankly3D)
> <frankly3d at gmail.com> wrote:
> >> This is a false positive.
> 
> rkhunter gave me so many false positives I stopped using it. This is
> probably as much (or more) a comment on my character as it is on the
> value of rkhunter.
>
Specific tests in RKH can be disabled, and false-positives whitelisted.



John.

-- 
John Horne, University of Plymouth, UK
Tel: +44 (0)1752 587287    Fax: +44 (0)1752 587001