on Wed, Apr 17, 2002, Tom Massey (tom_massey@dingoblue.net.au) wrote:
> On Tue, Apr 23, 2002 at 02:31:05PM +0000, Rory Campbell-Lange wrote:
> > There is a very small possibility that someone has intruded into our
> > network. I would like to test my 3 woody machines for possible root
> > kits. What is the best way of doing this? Should I check the md5sum of
> > programs such as find, ps and ifconfig against the packaged versions?
>
> $ apt-cache show chkrootkit
...and if that turns up null, there's always:
apt-get install rootkit
http://lists.debian.org/debian-devel/2002/debian-devel-200203/msg02337.html
;-)
--
Karsten M. Self <kmself@ix.netcom.com> http://kmself.home.netcom.com/
What Part of "Gestalt" don't you understand?
A guide to GNU/Linux partitioning:
http://kmself.home.netcom.com/Linux/FAQs/partition.html
Attachment:
pgpr1BFwaLpWF.pgp
Description: PGP signature