Checksums for compromise checks
Hi,
My Debian 2.1 (unstable) system detected a dozen or so port scans, via the
Debianized courtney package, coming from an older RedHat system that had
the NFS server bug. The RedHat system in question was able to determine
that ps and top were trojaned by using rpm to verify the ps and top md5
checksums. Does Debian have any such verification mechanism for
individual files (i.e. not the entire deb)? It seems like it would be a
useful feature to have available.
-Ossama
______________________________________________________________________
Ossama Othman <othman@cs.wustl.edu>
58 60 1A E8 7A 66 F4 44 74 9F 3C D4 EF BF 35 88 1024/8A04D15D 1998/08/26
Reply to: