1 |
Ouch, I'm not the one with this problem but would something like |
2 |
rkhunter which is recommended to be used by the -hardened team pick up |
3 |
something like this? |
4 |
|
5 |
I run with standard with 'rkhunter -c' do I need to specify other |
6 |
options with rkhunter? |
7 |
|
8 |
Thanks, |
9 |
|
10 |
Lance(stuNNed) |
11 |
|
12 |
On Mon, 2005-03-21 at 10:52 -0500, Wes Kurdziolek wrote: |
13 |
> When you upgrade certain packages, part of their post-install is to tell |
14 |
> init to restart b/c it or its configuration has changed. However, if |
15 |
> you haven't upgraded any of these packages (off the top of my head, I'm |
16 |
> not sure which, but I'd guess sysvinit would be a good start) it could |
17 |
> be a sign of someone installing a trojan init. |
18 |
> |
19 |
> On Sat, 2005-03-19 at 10:08 -0800, Ben Munat wrote: |
20 |
> > Anyone know why this: |
21 |
> > |
22 |
> > init: Trying to re-exec init |
23 |
> > |
24 |
> > would show up in my logs? |
25 |
> > |
26 |
> > Ben |
27 |
> > -- |
28 |
> > gentoo-server@g.o mailing list |
29 |
> > |
30 |
> -- |
31 |
> gentoo-server@g.o mailing list |
32 |
|
33 |
-- |
34 |
gentoo-server@g.o mailing list |