Re: rootkit not found by rkhunter

[Jörg Sommer <joerg@alea.gnuu.de>]

Hallo Noah,

Noah Meyerhans <noahm@debian.org> wrote:
> On Thu, Oct 08, 2009 at 09:08:31AM +0000, Jörg Sommer wrote:
>> > You need to make sure that the machine actually gets rebooted when
>> > security updates are made.
>> 
>> I thought for security fixes in modules it's enough to update/replace
>> the module. Isn't it?
>
> No.  If the module is already loaded in memory, then overwriting the
> file isn't going to help.

But removing the module and loading the new one should help. That's
often quicker than rebooting the whole system.

Bye, Jörg.
-- 
“Perl—the only language that looks the same
 before and after RSA encryption.”           (Keith Bostic)