[Pkg-sysvinit-devel] Bug#403863: initscripts: Stray file /lib/init/rw/.ramfs not in package list

Sven Wasmer svenfqab at ww.tu-berlin.de
Wed Aug 22 14:14:07 UTC 2007


"chkrootkit is reporting some files and dirs as suspicious: `.packlist',
`.cvsignore', etc. These are clearly false positives. Can't you ignore
these?

Ignoring some files and dirs could impair chkrootkit's accuracy. An
attacker might use this, since he knows that chkrootkit will ignore
certain files and dirs."

http://www.chkrootkit.org/faq/

i don´t think that it will be *fixed*. the reasons above are clear and
as far as I may mention: it´s up to those developers, who use hidden
files in uncomfortable places. Unfortunately it seems there are more
developers using dot-file-flags...
but actually the ".ramfs" is the only file which is declared as
"suspicous" in my daily chkrootkit report.

Am I wrong?


cheers
sven






More information about the Pkg-sysvinit-devel mailing list