On Tue, Sep 16, 2003 at 05:08:59PM +0200, Simon Matter wrote:
> No please. There are better solutions than mkfs in most situations. Why
> being so afraid about kernel modules and rootkit binaries? Boot from a CD
> like knoppix or similar. Then mount all filesystems and examine the
> system. First check whether your rpm database has been touched. A recent
> backup may help here. Then rpm is your friend by finding out which files
no its not, an attacker can modify the rpmdb.
--
Ethan Benson
http://www.alaska.net/~erbenson/
pgpUudHUdDsjH.pgp
Description: PGP signature
|