RPM as file integrity checker

Matthew Miller mattdm at mattdm.org
Sun Dec 26 19:21:43 UTC 2004


On Sun, Dec 26, 2004 at 12:45:00PM +0100, Volker Kindermann wrote:
> > is it enough to rely on rpm as a file integrity
> >checker ?
> depends on your cracker's skills. If he (or the rootkit) is good, he 
> will modifiy the rpm database as well and you won't get any valuable 
> information from your checks.

Are there known rootkits which do this?


-- 
Matthew Miller           mattdm at mattdm.org        <http://www.mattdm.org/>
Boston University Linux      ------>                <http://linux.bu.edu/>




More information about the fedora-list mailing list