[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: chkrootkit and rkhunter are too old ?



On Fri, Jul 13, 2007 at 11:57:44AM -0700, David Brodbeck wrote:
 
> * The exception is if tripwire or aid is used after booting from a  
> read-only medium (such as a live CD) and uses checksums that are also  
> retrieved from read-only media.  But few people do it this way  
> because it's a lot of work to maintain and requires taking the  
> machine down to do a check.

Is there no way for a 'secure' host to check the md5sums on a remote
host via scp or something?  The checksums could be on that secure host
(or on a CD in a drive on the secure host)?

Doug.



Reply to: