Re: chrootkit and false LKM positive
Le mar 27/01/2004 à 13:34, Lupe Christoph a écrit : > On Tuesday, 2004-01-27 at 12:19:41 +0100, Yannick Roehlly wrote: > > > The false LKM positives seem to result from a bug in chkrootkit which is > > not aware of the new threading model of 2.6 kernel. > > > See bug #222179. > > Not exactly true. This is also in recent 2.4.x kernels. See my other > mail. I'm running 2.4.23. I had false positive as well with busy servers running Exim (and on 2.4 kernels) > > Lupe Christoph > -- > | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | > | "Violence is the resort of the violent" Lu Tze | > | "Thief of Time", Terry Pratchett | >
Re: chrootkit and false LKM positive
On Tuesday, 2004-01-27 at 12:19:41 +0100, Yannick Roehlly wrote: > The false LKM positives seem to result from a bug in chkrootkit which is > not aware of the new threading model of 2.6 kernel. > See bug #222179. Not exactly true. This is also in recent 2.4.x kernels. See my other mail. I'm running 2.4.23. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the resort of the violent" Lu Tze | | "Thief of Time", Terry Pratchett |
Re: chrootkit and false LKM positive
thanks.. Em Ter, 2004-01-27 às 09:19, Yannick Roehlly escreveu: > Hi! > > The false LKM positives seem to result from a bug in chkrootkit which is > not aware of the new threading model of 2.6 kernel. > > See bug #222179. > > Yannick > -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: chrootkit and false LKM positive
Le mar 27/01/2004 à 13:34, Lupe Christoph a écrit : > On Tuesday, 2004-01-27 at 12:19:41 +0100, Yannick Roehlly wrote: > > > The false LKM positives seem to result from a bug in chkrootkit which is > > not aware of the new threading model of 2.6 kernel. > > > See bug #222179. > > Not exactly true. This is also in recent 2.4.x kernels. See my other > mail. I'm running 2.4.23. I had false positive as well with busy servers running Exim (and on 2.4 kernels) > > Lupe Christoph > -- > | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | > | "Violence is the resort of the violent" Lu Tze | > | "Thief of Time", Terry Pratchett | > -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: chrootkit and false LKM positive
thanks.. Em Ter, 2004-01-27 às 09:19, Yannick Roehlly escreveu: > Hi! > > The false LKM positives seem to result from a bug in chkrootkit which is > not aware of the new threading model of 2.6 kernel. > > See bug #222179. > > Yannick >
Re: chrootkit and false LKM positive
On Tuesday, 2004-01-27 at 12:19:41 +0100, Yannick Roehlly wrote: > The false LKM positives seem to result from a bug in chkrootkit which is > not aware of the new threading model of 2.6 kernel. > See bug #222179. Not exactly true. This is also in recent 2.4.x kernels. See my other mail. I'm running 2.4.23. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the resort of the violent" Lu Tze | | "Thief of Time", Terry Pratchett | -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
