[Pkg-sysvinit-devel] Bug#403863: Cron <root@stfu> test -x /usr/sbin/anacron || run-parts --report /etc/cron.daily

[Chris Samuel]

On Fri, 19 Jan 2007, Michael Holzt wrote:

> I just found this bug report and i would like to add to the "It also looks
> remarkably like something left by a break-in or rootkit.". In fact the
> chkrootkit package _does_ warn about this file and identifies it as a
> possible rootkit:

Having just upgraded my webserver to Edgy I got exactly this warning which 
sent a chill down my spine.

The reason is that chkrootkit will flag any file under /lib (amongst other 
places) that starts with a . (along with other patterns).

So I'd just like to echo that it would be nice if this file was renamed to 
something that didn't give chkrootkit the heebie jeebies.. :-)

cheers,
Chris
-- 
 Chris Samuel  :  http://www.csamuel.org/  :  Melbourne, VIC

This email may come with a PGP signature as a file. Do not panic.
For more info see: http://en.wikipedia.org/wiki/OpenPGP
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 481 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-sysvinit-devel/attachments/20070213/cf7daadb/attachment.pgp