I'm here because both 'tiger' and 'chkrootkit' are reporting potential problems. From tiger:
-------------------------------------------------------------------------------- # Checking installed files against packages... --WARN-- [lin001w] File `/lib/init/rw/.mdadm/md3-uevent' does not belong to any package. --WARN-- [lin001w] File `/lib/init/rw/.mdadm/md2-uevent' does not belong to any package. --WARN-- [lin001w] File `/lib/init/rw/.mdadm/md1-uevent' does not belong to any package. --WARN-- [lin001w] File `/lib/init/rw/.mdadm/md0-uevent' does not belong to any package. --WARN-- [lin001w] File `/lib/init/rw/.ramfs' does not belong to any package. -------------------------------------------------------------------------------- From chkrootkit: -------------------------------------------------------------------------------- Searching for suspicious files and dirs, it may take a while... /lib/init/rw/.mdadm /lib/init/rw/.ramfs /lib/init/rw/.mdadm -------------------------------------------------------------------------------- I may be wrong, but it's my opinion that tiger and chkrootkit are right to report these files and that this is not a bug in them. Reassigning this bug to chkrootkit will not fix the the fact that tiger reports these files as not belonging to any package. Like others, I became very suspicious when I first found a hidden directory under /lib.
