Chkrootkit finds /lib/init/rw/.ramfs on debian etch
March 1st, 2007
6 comments
If you have chkrootkit installed on debian etch, you might be getting these messages:
/etc/cron.daily/chkrootkit:
The following suspicious files and directories were found:
/lib/init/rw/.ramfs
This is a bug in initscripts, which puts a hidden file in /lib/init/rw but shouldn’t. Until it is fixed, you can patch chkrootkit to get rid of that message.
Update: Apparently, chkrootkit also stumbles on /lib/init/rw/.mdadm. Adapt the patch as needed.
Categories: Tech