Re: rootkit in a package

[Alexander Hvostov <alex@aoi.dyndns.org>]

csj wrote:

> alpha:~# chkrootkit | grep Sharpe
> Searching for RH-Sharpe's default files... Possible RH-Sharpe's rootkit
installed
> alpha:~# apt-get remove --purge slice
> Reading Package Lists... Done
> Building Dependency Tree... Done
> The following packages will be REMOVED:
>   slice*
> 0 packages upgraded, 0 newly installed, 1 to remove and 3  not upgraded.
> Need to get 0B of archives. After unpacking 98.3kB will be freed.
> Do you want to continue? [Y/n] y
> Reading changelogs... Done
> (Reading database ... 92734 files and directories currently installed.)
> Removing slice ...
> alpha:~# chkrootkit | grep Sharpe
> Searching for RH-Sharpe's default files... nothing found

This reminds me of an AFD [April Fool's Day] a couple of years ago. Someone
ITP'd 'rootkit'. "Don't anyone tell them it uninstalls cleanly..."

Made my day.

Alex.