Which to trust: chkrootkit or rkhunter?

[Maurizio Marini]

On Thu, 7 Jun 2012 15:16:09 +0000 (UTC)
Beartooth <beartooth at comcast.net> wrote:

> 
> 	One tells me, on several machines, that /sbin/init is infected 
> with the Suckit rootkit; the other says not. Is there a way to tell 
> whether I'm seeing a false positive or a false negative? 
this was queried and answered not more than 2 months ago on this lists, it is a
false positive
m
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5549 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/users/attachments/20120607/ee82e3b9/attachment-0001.p7s>