chkrootkit reports systemd:s default /sbin/init as INFECTED

Linus Walleij at
Sat Oct 1 07:58:12 UTC 2011

Following the intrusion on I reverified my system
with chkrootkit and it moans like this:

Searching for Suckit rootkit... Warning: /sbin/init INFECTED

SuckIT rootkit? Don't think so, because after
yum reinstall systemd, chkrootkit still reports it.

This is on x86_64

I don't know where to report this false positive, shall it
be sent to chkrootkit?

Anybody knows what to do with this?

Or have I been owned after all :-P

Linus Walleij

More information about the devel mailing list