| 1 |
On Sunday 04 April 2004 18:11, Tobias Weisserth wrote: |
| 2 |
> |
| 3 |
> That's why I wrote a *good* Tripwire setup :-) |
| 4 |
> |
| 5 |
> How should a root kit fool my Tripwire setup if the necessary binaries |
| 6 |
> and the database are on a mounted CD? :-) This is *extremely* unlikely |
| 7 |
> and probably demands a *very* difficult attack approach. |
| 8 |
> |
| 9 |
> I'm doing the same with chkrootkit. Write protected media can't be |
| 10 |
> fooled :-) |
| 11 |
|
| 12 |
Given that you actually boot from that write protected medium, and that you |
| 13 |
can trust your bios. |
| 14 |
|
| 15 |
Paul |
| 16 |
|
| 17 |
-- |
| 18 |
Paul de Vrieze |
| 19 |
Gentoo Developer |
| 20 |
Mail: pauldv@g.o |
| 21 |
Homepage: http://www.devrieze.net |
Archives