chkrootkit-0.40 & FreeBSD 5.1

[Joshua Oreman]

On Fri, Jun 06, 2003 at 11:21:47AM -0700 or thereabouts, xcas at cox.net seemed to write:
> Is there a problem with 'chkrootkit-0.40' on 5.x? It tells me that some of
> the files are infected (I know for a fact that they're not)..
> 
> Files reported as infected:
> /usr/bin/chfn
> /usr/bin/chsh
> /bin/date
> /bin/ls
> /bin/ps
> 
> localhost# uname -a
> FreeBSD localhost.tuxsux.org 5.1-RELEASE FreeBSD 5.1-RELEASE #0: Wed Jun  4 06:09:58 MST 2003
> cas at localhost.tuxsux.org:/usr/obj/usr/src/sys/KADAFI  i386

Yes.
It gives false positives for these 5 commands.

-- Josh

> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"