Re: check for root kit
On Tue, Apr 23, 2002 at 02:31:05PM +0000, Rory Campbell-Lange wrote:
> There is a very small possibility that someone has intruded into our
> network. I would like to test my 3 woody machines for possible root
> kits. What is the best way of doing this? Should I check the md5sum of
> programs such as find, ps and ifconfig against the packaged versions?
$ apt-cache show chkrootkit
Description: Checks for signs of rootkits on the local system
chkrootkit identifies whether the target computer is infected with a
rootkit.
May get you started.
--
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: