I can confirm the issue on Lucid. It's probably related to an upstart
update to 0.6.5-7.

# lsb_release -d
Description:    Ubuntu 10.04.1 LTS
# chkrootkit -V
chkrootkit version 0.49
# chkrootkit      
[...]
Searching for Suckit rootkit...                             Warning: /sbin/init 
INFECTED
[...]

# strings /sbin/init | egrep HOME
# cat /proc/1/maps | egrep "init."
00e41000-00e5a000 r-xp 00000000 68:01 1572880    /sbin/init (deleted)
00e5a000-00e5b000 r--p 00019000 68:01 1572880    /sbin/init (deleted)
00e5b000-00e5c000 rw-p 0001a000 68:01 1572880    /sbin/init (deleted)

-- 
False positive for SucKit
https://bugs.launchpad.net/bugs/454566
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to chkrootkit in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to