Home / ubuntu / Questions / 1280617
In Process
Sonia Slimani
Asked: 2020-10-07 11:20:46 +0800 CST

chkrootkit issues

  • 772

When I use chkrootkit -q, I get:

/lib/modules/5.3.0-1035-aws/vdso/.build-id /lib/modules/5.4.0-1025-aws/vdso/.build-id /lib/modules/4.15.0-1044-aws/vdso/.build-id
/lib/modules/5.3.0-1035-aws/vdso/.build-id /lib/modules/5.4.0-1025-aws/vdso/.build-id /lib/modules/4.15.0-1044-aws/vdso/.build-id
not tested

ens5: PACKET SNIFFER(/lib/systemd/systemd-networkd[714])
not tested

Please, anyone knows what means these issues? and if they are false positives or not?

chkrootkit

1 Answers

  1. chkrootkit is warning you about these filenames because they're "hidden" (they begin with a "."), and ls won't list them without -a or -A.

    You can see if they're part of a package with dpkg -S, and further investigate the files with ls, file, od, less, readelf.

    • 0