chkrootkit (0.57-2) unstable; urgency=medium
The Debian version of chkrootkit disbles two tests that
involve sending kill signals to processes:
* The test for 'Kovid LKM' sends a 'SIGCONT' to pid 31337
* The test for 'ENYELKM LKM' sends various signals to pids 12345 and 1
These tests have been disabled because if those pids are regular processes the
signal may cause undesirable consequences.
This means that chkrootkit will potentially fail to detect these rootkits.
-- Richard Lewis <richard.lewis.debian@googlemail.com> Sun, 12 Mar 2023 12:31:00 +0100
|