README.Debian for chkrootkit
----------------------------

if chkrootkit says that it may have found a rootkit, "don't panic."
first, inspect your system and make sure that chkrootkit hasn't found a
false positive.  by design, chkrootkit is a bit trigger happy.  it's
better to be safe than to be sorry, i suppose.

please see README.FALSE-POSITIVES for a brief discussion on false
positives and a list of know packages that cause false positives.

 -- lmoore <lmoore@debian.org>, Thu Apr 21 17:13:59 2005

 Since 0.52-1 release, the user can set a ignore list just setting it
 at /etc/cron.daily.chkrootkit. By default it is set to "/dev/null".
See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=660998 for more info.

 -- Marcos Fouces <marcos@debian.org>  Sun, 09 Jul 2017 23:22:52 +0200