Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 14 Jan 2008 20:11:22 +0100
From:      Dan Lukes <dan@obluda.cz>
To:        freebsd security <freebsd-security@freebsd.org>
Subject:   Re: Anti-Rootkit app
Message-ID:  <478BB3DA.5070302@obluda.cz>
In-Reply-To: <478BA818.2090103@quip.cz>
References:  <478A84DD.3040205@opengea.org> <478BA818.2090103@quip.cz>

next in thread | previous in thread | raw e-mail | index | archive | help
>> I need to install an anti-rootkid

	If I understand correctly, an intruder need to be superuser to be able 
to install a rootkit.

	If our intruders has superuser privileges, they can tamper any 
anti-rootkit.

	Is the main reason to install anti-rootkit we count the intruders are 
so dumb to look for one of port's anti-rootkit package before they do 
it's dirt work ?

	Or I miss something important ?

					Dan



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?478BB3DA.5070302>