>
>
> The regular running chkrootkit apparently creates a file '1' in the
> directory /usr/lib/chkrootkit. Checking for a supposed bad redirection
> in the scripts of the package of chkrootkit (with "grep -n '> *1'
> /etc/cron.daily/chkrootkit /usr/sbin/chkrootkit") found the following:
>
> /usr/sbin/chkrootkit:1423:
> ${echo} >1 "$ROOTDIRproc/syslogk" > /dev/null 2>&1
>
> This looks very strange, especially as I don't see a variable echo being
> assigned anywhere. I'm not quite sure what is intended here so I don't
> try to speculate about a correct patch, sorry.
>
yes, ive spotted this one - i am working on a fix. and will be done soon,
but every time i look at the code i spot something else that is wrong.
this line is meant to be more along the lines of
${echo} 1 > "${ROOTDIR}proc/syslogk 2>/dev/null
($echo is defined by the main loop, although im sceptical it is actually
used given echo is a builtin)
( i am writing from memory and there is another
"redirection" that is even worse thsn this one so i may be misremebering)
... i will include some code to remove the "1" -.didnt think of this!
but at least you confirmed that this test was never working as intended!
>
>
