[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: check for root kit

On Fri, 19 Apr 2002, Carlos Sousa wrote:

> That's a scary tool, if I ever saw one. I have it running once a day,
> and it almost always reports a possible LKM "infection". Sometimes it
> detects 1 process hidden from ps, sometimes 3 processes, sometimes none.
> I'm reasonably sure the machine is not compromised, I think the tool is
> just a bit too zealous.

This is possible, but I would seriously look into if you're compromised.
When I run chkrootkit, I never turn up anything.


To UNSUBSCRIBE, email to debian-user-request@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Reply to: