Re: check for root kit
On Fri, 19 Apr 2002, Carlos Sousa wrote:
> That's a scary tool, if I ever saw one. I have it running once a day,
> and it almost always reports a possible LKM "infection". Sometimes it
> detects 1 process hidden from ps, sometimes 3 processes, sometimes none.
> I'm reasonably sure the machine is not compromised, I think the tool is
> just a bit too zealous.
This is possible, but I would seriously look into if you're compromised.
When I run chkrootkit, I never turn up anything.
--
Baloo
--
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: