Gentoo Archives: gentoo-user

From: Dave S <gentoo@××××××××.net>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] chkrootkit LKM trojan ?
Date: Sun, 16 Jul 2006 22:24:59
Message-Id: 200607162316.52393.gentoo@pusspaws.net
In Reply to: Re: [gentoo-user] chkrootkit LKM trojan ? by Benno Schulenberg
1 On Sunday 16 July 2006 22:12, Benno Schulenberg wrote:
2 > Dave S wrote:
3 > > On Sunday 16 July 2006 21:36, Hemmann, Volker Armin wrote:
4 > > > "no, if you chroot, the binaries from the chroot are used.
5 > >
6 > > The problem is if I do not chroot chkrootkit will scan the
7 > > knoppix CD - tried it :). It needs to access the live proc etc on
8 > > a running system.
9 >
10 > Use -r. Even when you chroot, still the /proc of your Knoppix
11 > system will be used, as it's the only system running.
12 >
13 > Benno
14
15 Did a chrootlit -r /mnt/hda1 ... all clear.
16
17 Looks good - can never be 100% sure of cource :)
18
19 Dave
20
21 --
22 gentoo-user@g.o mailing list