[olug] lkm problems

[Phil Brutsche]

Don Kauffman wrote:
> I'm running the stock Suse 9.1
> 
> I have about 17 processes running that are hidden according to
> chkrootkit-0.43.

Chances are chkrootkit is getting confused by the NPTL multithreading 
mechanism used by all 2.6 kernels.

Check out this link:

http://portal.suse.com/sdb/en/2004/08/pohletz_chkroot_infected_progs.html

-- 

Phil Brutsche
phil at brutsche.us