[Wolves] chkrootkit command
fizzy
fizzyorguk at yahoo.com
Thu Mar 17 08:54:59 GMT 2005
--- David Goodwin <david at codepoets.co.uk> wrote:
> YaST is recommending you use it as part of a rescue
> cd, in that when
> used from a rescue cd you know you have binaries
> (from the cd) which
> haven't been tampered with (well - if they have,
> anyone who bought SuSE
> woudl be in the sh1t), so if you're trying to verify
> if your system has
> been comprimised it can use known safe binaries
> which will hopefully
> work correctly (rather than those left behind by a
> root kit which would
> tend to hide various things from you)
You'll also need to burn the file signatures onto a
cd, if you keep them on a hdd they can be easily
overwritten :)
> David.
fizz
Send instant messages to your online friends http://uk.messenger.yahoo.com
More information about the Wolves
mailing list