[Wolves] chkrootkit command

fizzy fizzyorguk at yahoo.com
Thu Mar 17 08:54:59 GMT 2005


--- David Goodwin <david at codepoets.co.uk> wrote:
> YaST is recommending you use it as part of a rescue
> cd, in that when 
> used from a rescue cd you know you have binaries
> (from the cd) which 
> haven't been tampered with (well - if they have,
> anyone who bought SuSE 
> woudl be in the sh1t), so if you're trying to verify
> if your system has 
> been comprimised it can use known safe binaries
> which will hopefully 
> work correctly (rather than those left behind by a
> root kit which would 
> tend to hide various things from you)

You'll also need to burn the file signatures onto a
cd, if you keep them on a hdd they can be easily
overwritten :)

> David.
fizz

Send instant messages to your online friends http://uk.messenger.yahoo.com 



More information about the Wolves mailing list