Which to trust: chkrootkit or rkhunter?
Michael Schwendt
mschwendt at gmail.com
Thu Jun 7 17:13:18 UTC 2012
On Thu, 7 Jun 2012 15:16:09 +0000 (UTC), Beartooth wrote:
>
> One tells me, on several machines, that /sbin/init is infected
> with the Suckit rootkit; the other says not. Is there a way to tell
> whether I'm seeing a false positive or a false negative?
Check out: http://bugz.fedoraproject.org/chkrootkit
It's an FAQ. It has been answered many times before in various places.
--
Fedora release 17 (Beefy Miracle) - Linux 3.4.0-1.fc17.x86_64
loadavg: 0.40 0.39 0.38
More information about the users
mailing list