Which to trust: chkrootkit or rkhunter?

[Michael Schwendt]

On Thu, 7 Jun 2012 15:16:09 +0000 (UTC), Beartooth wrote:

> 
> 	One tells me, on several machines, that /sbin/init is infected 
> with the Suckit rootkit; the other says not. Is there a way to tell 
> whether I'm seeing a false positive or a false negative? 

Check out: http://bugz.fedoraproject.org/chkrootkit

It's an FAQ. It has been answered many times before in various places.

-- 
Fedora release 17 (Beefy Miracle) - Linux 3.4.0-1.fc17.x86_64
loadavg: 0.40 0.39 0.38