Since Sunday May 6, I am now seeing this when chkrootkit runs.
Searching for Suckit rootkit... Warning: /sbin/init INFECTED
I have read some threads dated 2011 that is is a false-positive.
Anyone else seeing this?
--
Keep well,
Chris
--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
05-11-2012, 03:48 AM
Fajar Priyanto
chkrootkit
On Fri, May 11, 2012 at 8:17 AM, Chris <racerx@makeworld.com> wrote:
> Greetings,
>
> Since Sunday May 6, I am now seeing this when chkrootkit runs.
>
> Searching for Suckit rootkit... *Warning: /sbin/init INFECTED
>
> I have read some threads dated 2011 that is is a false-positive.
> Anyone else seeing this?
Hi Chris,
Maybe you have to upgrade the chrookit?
--
http://linux3.arinet.org
--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
05-11-2012, 04:52 AM
"Chris"
chkrootkit
I'm running 049, I believe that happens to be the latest in the ubu repo.
I run my update once a day. Oddly enough, rkhunter checks the system clean.
Sent from my HTC.
----- Reply message -----
From: "Fajar Priyanto" <fajarpri@arinet.org>
Date: Thu, May 10, 2012 10:48 pm
Subject: chkrootkit
To: "Ubuntu user technical support, not for general discussions" <ubuntu-users@lists.ubuntu.com>
On Fri, May 11, 2012 at 8:17 AM, Chris <racerx@makeworld.com> wrote:
> Greetings,
>
> Since Sunday May 6, I am now seeing this when chkrootkit runs.
>
> Searching for Suckit rootkit... *Warning: /sbin/init INFECTED
>
> I have read some threads dated 2011 that is is a false-positive.
> Anyone else seeing this?
Hi Chris,
Maybe you have to upgrade the chrookit?
--
http://linux3.arinet.org
--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
05-11-2012, 05:40 AM
Chris
chkrootkit
On 5/11/2012 12:23 AM, Fajar Priyanto wrote:
> On Fri, May 11, 2012 at 12:52 PM, Chris <racerx@makeworld.com> wrote:
>> I'm running 049, I believe that happens to be the latest in the ubu repo.
>>
>> I run my update once a day. Oddly enough, rkhunter checks the system clean.
>
> Do you have "similar" system where you can test if it gives the same result?
>
> Or I can help you testing on a VM. Which Ubuntu version?
>
apt-get update/upgrade runs once a day (out of habit when I ran Debian SID)
--
Keep well,
Chris
--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
05-11-2012, 08:42 PM
NoOp
chkrootkit
On 05/10/2012 05:17 PM, Chris wrote:
> Greetings,
>
> Since Sunday May 6, I am now seeing this when chkrootkit runs.
>
> Searching for Suckit rootkit... Warning: /sbin/init INFECTED
>
> I have read some threads dated 2011 that is is a false-positive.
> Anyone else seeing this?
>
>
Reported 3 years ago...
https://bugs.launchpad.net/ubuntu/+source/chkrootkit
<https://bugs.launchpad.net/ubuntu/+source/chkrootkit/+bug/454566>
[False positive for SucKit]
Ditto for Redhat:
<https://bugzilla.redhat.com/show_bug.cgi?id=636231>
--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
chkrootkit
