RE: [cobalt-security] chkrootkit output question

["Gary M. Root" <groot@xxxxxxxxxxxxxxx>]

Title: Message

Yes, like Jan, I'm running it as root, too. Using 0.37 on a variety of RaQ 3's and 4's. All display this basic message in various forms.

Also, feel free to educate me on posting etiquette. I see references to "top post" and text vs. HTML, but no clear preference. I'm happy to oblige the preferred styles!

I assume you ran this as root to begin with? 

 

Dave Smulsky
Senior Network Admin

 

dave@xxxxxxxxxxxxxxxx
www.thehostworks.com

The only strange message I get on all of our RaQ's from daily chkrootkit is:

Searching for anomalies in shell history files... /usr/bin/find: //proc/6/fd: Permission denied

/usr/bin/find: //proc/7/fd: Permission denied

/usr/bin/find: //proc/8/fd: Permission denied

/usr/bin/find: //proc/9/fd: Permission denied

/usr/bin/find: //proc/10/fd: Permission denied

/usr/bin/find: //proc/6/fd: Permission denied

/usr/bin/find: //proc/7/fd: Permission denied

/usr/bin/find: //proc/8/fd: Permission denied

/usr/bin/find: //proc/9/fd: Permission denied

/usr/bin/find: //proc/10/fd: Permission denied

nothing found

Is this something to be concerned about? Wonder why permission is denied?

 

Thanks,

Gary