chkrootkit-0.40 FreeBSD 5.1

2003-06-06 Thread xcas
Is there a problem with 'chkrootkit-0.40' on 5.x? It tells me that some of
the files are infected (I know for a fact that they're not)..

Files reported as infected:
/usr/bin/chfn
/usr/bin/chsh
/bin/date
/bin/ls
/bin/ps

localhost# uname -a
FreeBSD localhost.tuxsux.org 5.1-RELEASE FreeBSD 5.1-RELEASE #0: Wed Jun  4 06:09:58 
MST 2003
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/KADAFI  i386
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: chkrootkit-0.40 FreeBSD 5.1

2003-06-06 Thread Joshua Oreman
On Fri, Jun 06, 2003 at 11:21:47AM -0700 or thereabouts, [EMAIL PROTECTED] seemed to 
write:
 Is there a problem with 'chkrootkit-0.40' on 5.x? It tells me that some of
 the files are infected (I know for a fact that they're not)..
 
 Files reported as infected:
 /usr/bin/chfn
 /usr/bin/chsh
 /bin/date
 /bin/ls
 /bin/ps
 
 localhost# uname -a
 FreeBSD localhost.tuxsux.org 5.1-RELEASE FreeBSD 5.1-RELEASE #0: Wed Jun  4 06:09:58 
 MST 2003
 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/KADAFI  i386

Yes.
It gives false positives for these 5 commands.

-- Josh

 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]