Re: Hoax: Re: What up with www.debian.org ?

From: Johann Spies (jspies_at_sun.ac.za)
Date: 11/21/03

  • Next message: David Palmer.: "Re: README What up with www.debian.org ?" 
    Date: Fri, 21 Nov 2003 12:50:50 +0200
To: debian-user@lists.debian.org

    On Fri, Nov 21, 2003 at 02:39:10AM -0800, Tom wrote:
    > On Fri, Nov 21, 2003 at 03:52:43PM +0530, Raghavendra Bhat wrote:
    > > Tom posts:
    > >
    > > >> deinstalled due to missing dependencies, but the 2nd time through
    > > >> they work. (This time, it was most of the qt3*-dev and gtk2*-dev and
    > > >> relateds.)
    > >
    > > When did you notice this ?
    > >
    > > When I installed the procps of `sid' v3.x.x, chkrootkit was informing
    > > that I had a LKM worm but disappeared when downgraded. Some say that
    > > procps masks certain threads. I really wonder what is up, because now
    > > chkrootkit does not complain about masked threads on ps (procps v3.x.x,
    > > which I put in again).
    > >
    > > I have removed all my devel packages and chkrootkit as well.
    >
    > Christ, now I'm really getting scared:
    > chkrootkit reports:
    > Checking `lkm'... You have 4 process hidden for ps command
    > Warning: Possible LKM Trojan installed
    >
    > I'm running SID. What's this mean?

    There was a recent discussion on a bug in chkrootkit on
    debian-security. It might be the case here.

    Check
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=217278

    Regards
    Johann 

    -- 
Johann Spies          Telefoon: 021-808 4036
Informasietegnologie, Universiteit van Stellenbosch
     "A new commandment I give unto you; That ye love one 
      another. As I have loved you, so ye also must love one
      another.  By this shall all men know that ye are my 
      disciples, if ye have love one to another."    
                         John 13:34,35 
-- 
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
  • Next message: David Palmer.: "Re: README What up with www.debian.org ?"

    Relevant Pages