rootkit?

[John Summerfied]

Ralf Corsepius wrote:
> On Sun, 2005-12-11 at 00:20 -0800, Michael A. Peters wrote:
> 
>>On Sat, 2005-12-10 at 23:37 -0700, Craig White wrote:
>>
>>
>>>----
>>>Backing up data directories and reinstalling from scratch is the only
>>>known method to ensure the integrity of a system that has been
>>>compromised.
>>
>>Sun use to (still does?) allow you to enter an md5sum and it would tell
>>you exactly what file it matched, along with what patch level.
> 
> rpm based systems have "rpm {-V|--verify}", which provide a comparable
> feature.
> 
> Ralf
> 
> 

A point I overlooked when recommending "rpm -Va" is that there is some 
possibility that the RPM database is clobbered.

-- 

Cheers
John

-- spambait
1aaaaaaa at computerdatasafe.com.au  Z1aaaaaaa at computerdatasafe.com.au
Tourist pics http://portgeographe.environmentaldisasters.cds.merseine.nu/

do not reply off-list