[Pkg-sysvinit-devel] Bug#403863: Bug#403863: chkrootkit and false positive dot-files

Petter Reinholdtsen pere at hungry.com
Sun Jan 25 21:54:39 UTC 2009


[Kenny]
> I am clearly late to the party, but this issue is still unresolved
> in Debian stable (presently etch).  More than two years in the
> waiting.  Ouch.

One can only wonder why the rootkit detectors still believe this file
is dangerous after more than two years, yes.

> What is using this file, anyway?

The file is created to make sure programs and scripts starting very
early in the boot can know if it is possible and safe to write to
/lib/init/rw/.  Not much is using it yet, but I believe that area
might be key to solving the problems associated with the event based
kernel very early in the boot.

Happy hacking,
-- 
Petter Reinholdtsen





More information about the Pkg-sysvinit-devel mailing list