Matthew Miller wrote: >Were there any interesting files in the users' home directories? (Look for >hidden files too, of course -- maybe a hidden directory named ... or >something.) Also check in /tmp and /var. And any luck with the >.bash_history? (For both the users and for root....) > > I have installed and use this stuff, http://www.rootkit.nl/, but it has never found any vulnerabilities (which probably does mean anything...) /Håkan
