Update: I've received a number of replies stating others have the same problem. I've also received a number of replies basically telling me "reinstall noob". Obviously, I've reinstalled the port. A fresh 4.10-PR as cvsup'd " FreeBSD 4.10-PRERELEASE #0: Sat May 1 09:32:14 EDT 2004" has the same problem. Unless the cvs source is trojaned, I'm leaving this as a false positive; just like 5.x shows. -Andrew On Sun, May 02, 2004 at 02:35:44AM +1000, [email protected] wrote 1.3K bytes in 35 lines about: : Probably because chrootkit doesn't know u builtworld and is still checking : whether chfn & chsh are infected against 4.9 MD5 Sums, I would suggest : reading the manual and seeing how to fix this or just reinstall it. : : - Mark : : -----Original Message----- : From: [email protected] : [mailto:[email protected]] On Behalf Of [email protected] : Sent: Saturday, 1 May 2004 10:54 pm : To: [email protected] : Subject: chkrootkit and 4.10-prerelease issues? : : Has anyone else seen chkrootkit (version 0.43) on 4.10-prerelease or later : report chfn, chsh, and date as infected? : : I built world yesterday, and my nightly chkrootkit reports this on run. : I've replaced the binaries with their 4.9 equivalents, and things don't : report as infected. I upgrade the 4.9 machine to 4.10, and chkrootkit : reports them as infected again. : : Is this similar to the 5.x issues with chkrootkit? : : -- : Andrew : _______________________________________________ : [email protected] mailing list : http://lists.freebsd.org/mailman/listinfo/freebsd-security : To unsubscribe, send any mail to "[email protected]" : : : _______________________________________________ : [email protected] mailing list : http://lists.freebsd.org/mailman/listinfo/freebsd-security : To unsubscribe, send any mail to "[email protected]" -- | Andrew | e-mail | web | gpg/pgp keyid | | | [email protected] | www.lewman.com | AC671F9B | "There is no reason for any individual to have a computer in their home." -- Ken Olsen, President of DEC, World Future Society Convention, 1977 _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "[email protected]"