On Fri, Oct 10, 2003 at 01:22:48PM +1300, Steve Wray wrote:
Getting rid of root kits?
[snip]
The answer we came up with was to update boxes by rsync with --delete
That's fairly useless as a security measure; I would *not* recommend this. It is not difficult for a script kiddie these days to use tools that will make this method ineffective for removal (giving you a false sense of security). Mike Stone