Re: check for root kit
On Tue, Apr 23, 2002 at 02:31:05PM +0000, Rory Campbell-Lange wrote:
> There is a very small possibility that someone has intruded into our
> network. I would like to test my 3 woody machines for possible root
> kits. What is the best way of doing this? Should I check the md5sum of
> programs such as find, ps and ifconfig against the packaged versions?
$ apt-cache show chkrootkit
Description: Checks for signs of rootkits on the local system
chkrootkit identifies whether the target computer is infected with a
May get you started.
To UNSUBSCRIBE, email to email@example.com
with a subject of "unsubscribe". Trouble? Contact firstname.lastname@example.org