RPM as file integrity checker
Matthew Miller
mattdm at mattdm.org
Sun Dec 26 19:21:43 UTC 2004
On Sun, Dec 26, 2004 at 12:45:00PM +0100, Volker Kindermann wrote:
> > is it enough to rely on rpm as a file integrity
> >checker ?
> depends on your cracker's skills. If he (or the rootkit) is good, he
> will modifiy the rpm database as well and you won't get any valuable
> information from your checks.
Are there known rootkits which do this?
--
Matthew Miller mattdm at mattdm.org <http://www.mattdm.org/>
Boston University Linux ------> <http://linux.bu.edu/>
More information about the fedora-list
mailing list