| 1 |
Quoting Grant <emailgrant@×××××.com>: |
| 2 |
|
| 3 |
|
| 4 |
>> also look for strange kernel modules |
| 5 |
> How can I do that? |
| 6 |
|
| 7 |
One way is to test what's in your /lib/modules with what's in your |
| 8 |
kernel source: |
| 9 |
|
| 10 |
[cmds] |
| 11 |
|
| 12 |
(cd /lib/modules/$( uname -r )/build/; find -type f -name '*.ko')|sort |
| 13 |
> /tmp/t1 |
| 14 |
|
| 15 |
(cd /lib/modules/$( uname -r )/kernel/; find . -type f -name '*.ko'; |
| 16 |
cd .. ;find misc video -type f -name '*.ko') | sort > /tmp/t2 |
| 17 |
|
| 18 |
diff -u /tmp/t1 /tmp/t2 > /tmp/t3 |
| 19 |
|
| 20 |
$EDITOR /tmp/t3 |
| 21 |
|
| 22 |
[end cmds] |
| 23 |
|
| 24 |
Anything that shows up with a + is extra that's not in your kernel |
| 25 |
directory. You could then do this on those files: |
| 26 |
|
| 27 |
[WHERE $FILE = {a single file with a + in front of it, but without the +}] |
| 28 |
|
| 29 |
equery belongs /lib/modules/$( uname -r )/$FILE |
| 30 |
|
| 31 |
if a package installed a module, it should show up with equery belongs. |
| 32 |
|
| 33 |
|
| 34 |
> Any other advice? I believe all ports to the internet have always |
| 35 |
> been closed. |
| 36 |
|
| 37 |
if you find out that your machine was crashing due to hardware |
| 38 |
failure, then more than likely that's all it was. |
| 39 |
|
| 40 |
-- |
| 41 |
gentoo-user@g.o mailing list |
Archives