Re: chkrootkit and rkhunter are too old ?
On Fri, Jul 13, 2007 at 11:57:44AM -0700, David Brodbeck wrote:
> * The exception is if tripwire or aid is used after booting from a
> read-only medium (such as a live CD) and uses checksums that are also
> retrieved from read-only media. But few people do it this way
> because it's a lot of work to maintain and requires taking the
> machine down to do a check.
Is there no way for a 'secure' host to check the md5sums on a remote
host via scp or something? The checksums could be on that secure host
(or on a CD in a drive on the secure host)?
Doug.
Reply to: