Bug#309942: chkrootkit: false positive on realplayer

2005-05-20 Thread Max Kamenetsky
Package: chkrootkit
Version: 0.45-1
Severity: normal

Chkrootkit reports a false positive on

/usr/lib/realplay-10.0.4/share/default/.realplayerrc

which is part of the realplayer package.  Perhaps it should be
excluded/whitelisted.

Thanks,
Max

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.11.6
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages chkrootkit depends on:
ii  binutils2.15-5   The GNU assembler, linker and bina
ii  debconf 1.4.49   Debian configuration management sy
ii  libc6   2.3.2.ds1-22 GNU C Library: Shared libraries an
ii  net-tools   1.60-13  The NET-3 networking toolkit

-- debconf information:
* chkrootkit/run_daily: true
* chkrootkit/run_daily_opts: -q
* chkrootkit/diff_mode: false


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#309942: chkrootkit: false positive on realplayer

2005-05-20 Thread lantz moore
Max Kamenetsky [EMAIL PROTECTED] writes:

 Package: chkrootkit
 Version: 0.45-1
 Severity: normal

 Chkrootkit reports a false positive on

 /usr/lib/realplay-10.0.4/share/default/.realplayerrc

 which is part of the realplayer package.  Perhaps it should be
 excluded/whitelisted.

thanks for the report.

i'll add a note to README.FALSEPOSITIVES.  however, see
http://www.chkrootkit.org/faq/#8 for an explanation of why upstream will
not fix this bug.

-l


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]