Which to trust: chkrootkit or rkhunter?

[Reindl Harald]

Am 07.06.2012 17:16, schrieb Beartooth:
> 
> 	One tells me, on several machines, that /sbin/init is infected 
> with the Suckit rootkit; the other says not. Is there a way to tell 
> whether I'm seeing a false positive or a false negative? 

this is a well known false positive on fedora since years

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 262 bytes
Desc: OpenPGP digital signature
URL: <http://lists.fedoraproject.org/pipermail/users/attachments/20120607/1d771f59/attachment-0001.sig>