Re: Debian audititing tool?

[Christian Kurz <shorty@getuid.de>]

On 00-12-21 Dan Hutchinson wrote:
> I would agree with your comments except the scan of the Linux Kernel.

Thanks. :)

>  You can use computer fornesics to scan the kernal against familiar trojan
> and virus patterns realitively quickly and at least identify problem

Hm, you know that some parts are written in ASM and that you could also
use ASM in some parts of the kernel to protect malicous code? How could
a fornesics (Hm, do you mean forensic?) detect this asm-code and know
that it is malicous?

Ciao
     Christian
-- 
Ein "Nein" ausgesprochen mit der tiefsten Überzeugung ist besser
und größer als ein "Ja" um zu gefallen oder noch schlimmer, um
Schwierigkeiten zu umgehen.
  -- Mahatma Gandhi