[Nottingham] Has my server been intruded or am I paranoid?

Chris Burton Chris at 7of9b.org
Mon Nov 17 02:36:46 UTC 2008

> If you were using an RPM based distro, you could do "rpm -Vf /bin/ps" to
> see if the various attributes have changed since installation. I've no
> idea how to do that using apt, though.

If you system uses prelink its likely to have fiddled with the binaries 
which make the rpm checks a bit useless these days.


More information about the Nottingham mailing list