Package: chkrootkit Version: 0.48-5 Severity: important My nightly chkrootkit now gives this error:
chkdirs [-n] dir ... chkdirs: Warning: Possible LKM Trojan installed If I run 'chkrootkit -x' I see that it's running chkdirs. Poking in the code, I see that it's going to run chkdirs with a series of directory arguments, so to simulate that I tried running it by hand: $ cd /usr/lib/chkrootkit $ ./chkdirs /tmp chkdirs [-n] dir ... Same error. Marked as important since this is going to spam anybody who's running chkrootkit in a daily sweep, and false securiy spam is bad news. -- System Information: Debian Release: lenny/sid APT prefers testing APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable') Architecture: powerpc (ppc) Kernel: Linux 2.6.26-1-powerpc Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1) Shell: /bin/sh linked to /bin/bash Versions of packages chkrootkit depends on: ii binutils 2.18.1~cvs20080103-7 The GNU assembler, linker and bina ii debconf [debconf-2. 1.5.22 Debian configuration management sy ii libc6 2.7-13 GNU C Library: Shared libraries ii net-tools 1.60-20 The NET-3 networking toolkit ii procps 1:3.2.7-8 /proc file system utilities chkrootkit recommends no packages. chkrootkit suggests no packages. -- debconf information: * chkrootkit/run_daily: true * chkrootkit/run_daily_opts: -q * chkrootkit/diff_mode: false -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
