I thought I should run a rootkit in connection to the recent Debian apt vulnerability, which I think I have fixed though. I used chkrootkit and get these two lines, which I'm not sure what to do with:
Checking `lkm'... find: ‘/proc/7952/task/7952/net’: Invalid argument
find: ‘/proc/7952/net’: Invalid argument
They stand out in the otherwise clean listing.
find? Thefindutilssource code shows no instance of that format being used. It's alwaysInvalid argument ... to -sizeetc. I.e., it mentions which option received the invalid argument. Also GNUfindtends to use a backtick for the opening quote: `somename'findis applied here. There's a number of different testschkrootkitperforms and these lines are included in the output. That's all I know.