chkrootkit warning!?!?

t l concert at europe.com
Wed Apr 14 17:46:16 UTC 2004


While waiting for 56 updates to download, I installed and ran "chkrootkit-0.43" from www.chkrootkit.org.  (I was impressed by the reports of intrusions/breaks at Stanford Solaris/Linux systems.

Running it produces the following warning:

    ...
    Checking `lkm'... You have     7 process hidden for readdir command
    You have     7 process hidden for ps command
    Warning: Possible LKM Trojan installed
    ...

I was running this on kernel-2.6.5-1.319 (update to 322 in progress), with "setenforce 0".

Anything I should be concerned about?
-- 
___________________________________________________________
Sign-up for Ads Free at Mail.com
http://promo.mail.com/adsfreejump.htm






More information about the fedora-test-list mailing list