Re: chkrootkit output

From: Matthew Miller (mattdm_at_mattdm.org)
Date: 05/31/05

  • Next message: Kaushik Chauhan: "inputrc command"
    Date: Tue, 31 May 2005 12:44:30 -0400
    To: For users of Fedora Core releases <fedora-list@redhat.com>
    
    

    On Tue, May 31, 2005 at 05:42:00PM +0100, Andy Green wrote:
    > | Checking `chkutmp'... The tty of the following user process(es) were
    > not found
    > | in /var/run/utmp !
    > | ! RUID PID TTY CMD
    > | ! root 4674 tty1 /sbin/mingetty tty1
    > Either we are both hacked the same way ;-) or it means chrootkit has
    > identified something that is a normal situation on our Fedora machines.

    Looks like chkutmp is new in version 0.45, and is being overly aggressive.
    This looks like a bug to me; I think it should be reported upstream at
    <http://www.chkrootkit.org/>.

    -- 
    Matthew Miller           mattdm@mattdm.org        <http://www.mattdm.org/>
    Boston University Linux      ------>                <http://linux.bu.edu/>
    Current office temperature: 79 degrees Fahrenheit.
    -- 
    fedora-list mailing list
    fedora-list@redhat.com
    To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
    

  • Next message: Kaushik Chauhan: "inputrc command"