Package: chkrootkit
Version: 0.48-3
Severity: normal

chkrootkit ignores the first -e options and takes into account only
the last one. The man page just says:

  -e   Exclude known false positive files/dirs, quoted, space separated.

So, chkrootkit doesn't behave as documented.

Note that one cannot space-separate the filenames in the RUN_DAILY_OPTS
variable of /etc/chkrootkit.conf due to sh word splitting (and AFAIK,
there's no quoting mechanism at this level). So, multiple -e options
are the only solution.

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (900, 'testing'), (900, 'stable'), (200, 'unstable')
Architecture: powerpc (ppc)

Kernel: Linux 2.6.25-2-powerpc
Locale: LANG=POSIX, LC_CTYPE=en_US.ISO8859-1 (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash

Versions of packages chkrootkit depends on:
ii  binutils            2.18.1~cvs20080103-4 The GNU assembler, linker and bina
ii  debconf [debconf-2. 1.5.22               Debian configuration management sy
ii  libc6               2.7-10               GNU C Library: Shared libraries
ii  net-tools           1.60-19              The NET-3 networking toolkit
ii  procps              1:3.2.7-8            /proc file system utilities

chkrootkit recommends no packages.

-- debconf information:
* chkrootkit/run_daily: true
* chkrootkit/run_daily_opts: -q -e /lib/init/rw/.ramfs -e 
/usr/lib/iceweasel/.autoreg -e /usr/lib/xulrunner-1.9/.autoreg
* chkrootkit/diff_mode: false



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to