Package: chkrootkit Version: 0.48-3 Severity: normal chkrootkit ignores the first -e options and takes into account only the last one. The man page just says:
-e Exclude known false positive files/dirs, quoted, space separated. So, chkrootkit doesn't behave as documented. Note that one cannot space-separate the filenames in the RUN_DAILY_OPTS variable of /etc/chkrootkit.conf due to sh word splitting (and AFAIK, there's no quoting mechanism at this level). So, multiple -e options are the only solution. -- System Information: Debian Release: lenny/sid APT prefers testing APT policy: (900, 'testing'), (900, 'stable'), (200, 'unstable') Architecture: powerpc (ppc) Kernel: Linux 2.6.25-2-powerpc Locale: LANG=POSIX, LC_CTYPE=en_US.ISO8859-1 (charmap=ISO-8859-1) Shell: /bin/sh linked to /bin/bash Versions of packages chkrootkit depends on: ii binutils 2.18.1~cvs20080103-4 The GNU assembler, linker and bina ii debconf [debconf-2. 1.5.22 Debian configuration management sy ii libc6 2.7-10 GNU C Library: Shared libraries ii net-tools 1.60-19 The NET-3 networking toolkit ii procps 1:3.2.7-8 /proc file system utilities chkrootkit recommends no packages. -- debconf information: * chkrootkit/run_daily: true * chkrootkit/run_daily_opts: -q -e /lib/init/rw/.ramfs -e /usr/lib/iceweasel/.autoreg -e /usr/lib/xulrunner-1.9/.autoreg * chkrootkit/diff_mode: false -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]