| 1 |
Ouch, I'm not the one with this problem but would something like |
| 2 |
rkhunter which is recommended to be used by the -hardened team pick up |
| 3 |
something like this? |
| 4 |
|
| 5 |
I run with standard with 'rkhunter -c' do I need to specify other |
| 6 |
options with rkhunter? |
| 7 |
|
| 8 |
Thanks, |
| 9 |
|
| 10 |
Lance(stuNNed) |
| 11 |
|
| 12 |
On Mon, 2005-03-21 at 10:52 -0500, Wes Kurdziolek wrote: |
| 13 |
> When you upgrade certain packages, part of their post-install is to tell |
| 14 |
> init to restart b/c it or its configuration has changed. However, if |
| 15 |
> you haven't upgraded any of these packages (off the top of my head, I'm |
| 16 |
> not sure which, but I'd guess sysvinit would be a good start) it could |
| 17 |
> be a sign of someone installing a trojan init. |
| 18 |
> |
| 19 |
> On Sat, 2005-03-19 at 10:08 -0800, Ben Munat wrote: |
| 20 |
> > Anyone know why this: |
| 21 |
> > |
| 22 |
> > init: Trying to re-exec init |
| 23 |
> > |
| 24 |
> > would show up in my logs? |
| 25 |
> > |
| 26 |
> > Ben |
| 27 |
> > -- |
| 28 |
> > gentoo-server@g.o mailing list |
| 29 |
> > |
| 30 |
> -- |
| 31 |
> gentoo-server@g.o mailing list |
| 32 |
|
| 33 |
-- |
| 34 |
gentoo-server@g.o mailing list |
Archives