Hi, > If you're happy that it's nothing nefarious then I > believe that you can get > rid of it by rotating /var/log/wtmp > > login as root: > cd /var/log > mv wtmp wtmp.old > touch wtmp > chmod 0644 wtmp > > Log in to the shell from another SSH session and make > sure /var/log/wtmp is > > 0 blocks (don't try cat it's in binary). Try > chkrootkit again.
Thanks this worked well. Jon _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security
