We're running Sarge with kernel 2.6.11, and have tried both
chkrootkit 0.45-1
chkrootkit 0.46a-2
...both of them have the same problem:
# /usr/sbin/chkrootkit -x lkm
ROOTDIR is `/'
###
### Output of: ./chkproc -v -v -p 3
###
CWD 10770: /var/lib/mysql
EXE 10770: /usr/sbin/mysqld
CWD 10771: /var/lib/mysql
EXE 10771: /usr/sbin/mysqld
CWD 11162: /var/lib/mysql
EXE 11162: /usr/sbin/mysqld
CWD 12602: /var/lib/mysql
EXE 12602: /usr/sbin/mysqld
CWD 12870: /var/lib/mysql
EXE 12870: /usr/sbin/mysqld
CWD 12970: /var/lib/mysql
EXE 12970: /usr/sbin/mysqld
CWD 13053: /var/lib/mysql
EXE 13053: /usr/sbin/mysqld
# ls /proc/10770/task
10767 10770 10771 11162 12602 12870 12970 13053
# ps aux | grep 10767
mysql 10767 0.0 2.8 73396 14844 ? S 2005 25:04
/usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql
--pid-file=/var/run/mysqld/mysqld.pid --skip-locking --port=3306
--socket=/var/run/mysqld/mysqld.sock
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
