Re: ignore chkrootkit false positive

David Siroky <[EMAIL PROTECTED]>: > > My chkrootkit is reporting "INFECTED PORT 465" where is my regular ssmtp > Postfix daemon. I found a lots of discussions about this problem but > everywhere was the last answer "That's OK, you can ignore it". I want > the chkrootkit ignore it. Is there any

Re: ignore chkrootkit false positive

2006/8/16, David Siroky <[EMAIL PROTECTED]>: Hi! My chkrootkit is reporting "INFECTED PORT 465" where is my regular ssmtp Postfix daemon. I found a lots of discussions about this problem but everywhere was the last answer "That's OK, you can ignore it". I want the chkrootkit ignore it. Is there

ignore chkrootkit false positive

Hi! My chkrootkit is reporting "INFECTED PORT 465" where is my regular ssmtp Postfix daemon. I found a lots of discussions about this problem but everywhere was the last answer "That's OK, you can ignore it". I want the chkrootkit ignore it. Is there any configuration option for this? Thank you.

Re: chkrootkit: false positive

I'm olso reciving an error message from chkrootkit but refering to a lkm trojan, for what I have seen its seems to be an error from chkrootkit. Cheers, rak On Tue, Jul 12, 2005 at 02:53:34PM -0400, Lorenzo Taylor wrote: > I am running orville-write on my Debian Sid system, which, as far as I c

chkrootkit: false positive

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I am running orville-write on my Debian Sid system, which, as far as I can tell, is the only package that provides /usr/bin/write. Every day, I get an email from Cron which presents the output of chkrootkit. It shows me a list of files and also a mes