chkrootkit reports systemd:s default /sbin/init as INFECTED

[Michael Schwendt]

On Sat, 1 Oct 2011 09:58:12 +0200, LW (Linus) wrote:

> Following the intrusion on kernel.org I reverified my system
> with chkrootkit and it moans like this:
> 
> Searching for Suckit rootkit... Warning: /sbin/init INFECTED
> 
> SuckIT rootkit? Don't think so, because after
> yum reinstall systemd, chkrootkit still reports it.
> 
> This is on x86_64
> 
> I don't know where to report this false positive, shall it
> be sent to chkrootkit?
> 
> Anybody knows what to do with this?
> 
> Or have I been owned after all :-P

Has been reported before -> http://bugz.fedoraproject.org/chkrootkit

-- 
Fedora release 16 (Verne) - Linux 3.1.0-0.rc8.git0.0.fc16.x86_64
loadavg: 0.90 0.57 0.32