Package: chkrootkit Version: 0.44-2 Severity: normal
-- System Information: Debian Release: 3.1 APT prefers testing APT policy: (650, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.8-2-k7 Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Versions of packages chkrootkit depends on: ii binutils 2.15-6 The GNU assembler, linker and bina ii debconf 1.4.30.13 Debian configuration management sy ii libc6 2.3.5-6 GNU C Library: Shared libraries an ii net-tools 1.60-10 The NET-3 networking toolkit -- debconf information: * chkrootkit/run_daily_opts: -q * chkrootkit/run_daily: true A little googling tracked this down: came across a link to the chkrootkit mailing list archives. Apparently in January this year, the developers issued a patch: chkrootkit currently fails to recognize threads in Linux kernel 2.6 and therefore warns about LKM. Attached patch fixes that problem: under 2.6 the threads are listed in /proc/$pid/task/$tpid. Applied the patch to chkproc.c, recompiled, ran chkrootkit again and hey presto, no complaints. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
