Date: Tue, 23 Sep 2014 11:51:56 +0200 From: List Monkey <listmonkey1@gmail.com> To: Brandon Vincent <Brandon.Vincent@asu.edu> Cc: freebsd-security@freebsd.org Subject: Re: ossec hit: Hidden process (rootkit) Message-ID: <542142BC.2000409@gmail.com> In-Reply-To: <CAJm4238JxvYicm6qy8kHVAA57Su-rGokt2Ua7RTC-yxUDYqpXQ@mail.gmail.com> References: <541FE781.2080505@gmail.com> <CAJm4238JxvYicm6qy8kHVAA57Su-rGokt2Ua7RTC-yxUDYqpXQ@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Brandon, The ossec-rootcheck is not present on my install (has it been deprecated?) I am able to use the agent-control to force a complete run. It runs without error. Arne On 23. sep. 2014 02:29, Brandon Vincent wrote: > On Mon, Sep 22, 2014 at 2:10 AM, List Monkey <listmonkey1@gmail.com> wrote: >> Any other thoughts? > If you run ossec-rootcheck manually do you still get an alert? > > Brandon Vincent
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?542142BC.2000409>