That particular one can occur if certain binaries aren't fully stripped. If they aren't stripped or optimised, or have debugging info in, then they trigger that test. On Mon, 15 Dec 2003, Pedro Fernandes Macedo wrote: > I've just run chkrootkit on a fedora machine I just installed and this > line is kinda worrying me.. > Searching for ZK rootkit default files and dirs... Possible ZK rootkit > installed > > The chkrootkit I'm using is the version available through fedora.us... > > I've tested chkrootkit on my personal machine and I also got the same > message... Is this a bug in chkrootkit? > Both machines are firewalled (one of them is behind a hardware firewall > , with no ports open and the other has iptables configured only to > accept ssh , amanda backup and nfs). > Any ideas on what's going on? > > > Pedro Macedo > > > -- > fedora-list mailing list > fedora-list@xxxxxxxxxx > To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list > -- Sam Barnett-Cormack Software Developer | Student of Physics & Maths UK Mirror Service (http://www.mirror.ac.uk) | Lancaster University