Re: chkrootkit message
On Tue 24 Jun 2014 at 09:46:04 +0000, Curt wrote:
> On 2014-06-24, Darac Marjal <mailinglist@darac.org.uk> wrote:
> >
> > Are you saying that rootkits don't exist on "modern" Linux?
> >
>
> I believe he's saying chrootkit is unlikely to find one.
Close.
If I, in my guise as a medical doctor, insisted on inoculating you
against RipOff disease at a cost of 20,000 Euros because you are
visiting a foreign country, you might employ certain criteria before
accepting the advice.
I'd suggest that the same criteria be applied to MithRa's rootkit,
Aquatica rootkit, zaRwT rootkit and Madalin rootkit. Independent
evidence for their existence is a bit thin on the ground.
I suppose I should be grateful that I can scan for the Lion and Lupper
worms the next time bind 8.2 and other ancient, unpatched software are
installed from an untrusted source on one of my machines.
The rationale appears to be: Rootkits exist. We should do something.
This is something.
Reply to: