On Fri, 11 Apr 2008 08:53:35 +0100 Alan Cox <alan@xxxxxxxxxxxxxxxxxxx> wrote: > you can usually recover a box pretty trivially. The problem, though, is that you can never really KNOW that everything is back in order. After someone has root and the run of your machine, he can do whatever he likes. You say that you found four exploits installed? What if there's really five? Or six? Or... I firmly believe that the only realistic way to deal with an intrusion of that nature is a full nuke and re-pave. -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com
