Re: check for root kit
--- Paul 'Baloo' Johnson <baloo@ursine.dyndns.org>
wrote:
> On Fri, 19 Apr 2002, Carlos Sousa wrote:
>
> > That's a scary tool, if I ever saw one. I have it
> running once a day,
> > and it almost always reports a possible LKM
> "infection". Sometimes it
> > detects 1 process hidden from ps, sometimes 3
> processes, sometimes none.
> > I'm reasonably sure the machine is not
> compromised, I think the tool is
> > just a bit too zealous.
>
> This is possible, but I would seriously look into if
> you're compromised.
> When I run chkrootkit, I never turn up anything.
>
<<SNIP>>
Same here. I never turn up anything when running chkrootkit.
=====
rascharles@yahoo.com
Hacking is a "Good Thing!"
See http://www.tuxedo.org/~esr/faqs/hacker-howto.html
__________________________________________________
Do You Yahoo!?
Yahoo! Tax Center - online filing with TurboTax
http://taxes.yahoo.com/
--
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: