On 07.06.2012, Beartooth wrote: > One tells me, on several machines, that /sbin/init is infected > with the Suckit rootkit; the other says not. Is there a way to tell > whether I'm seeing a false positive or a false negative? Seems to be a bug in chkrootkit..