On Sun, Dec 26, 2004 at 12:45:00PM +0100, Volker Kindermann wrote: > > is it enough to rely on rpm as a file integrity > >checker ? > depends on your cracker's skills. If he (or the rootkit) is good, he > will modifiy the rpm database as well and you won't get any valuable > information from your checks. Are there known rootkits which do this? -- Matthew Miller mattdm@xxxxxxxxxx <http://www.mattdm.org/> Boston University Linux ------> <http://linux.bu.edu/>
