Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 19 Aug 2001 20:21:39 -0400
From:      Rami AlZaid <lists@alzaid.com>
To:        freebsd-security@FreeBSD.ORG
Subject:   Re: Rooted
Message-ID:  <5.1.0.14.2.20010819201719.02396ff0@mail.alzaid.com>
In-Reply-To: <20010818212540.W38221-100000@localhost>
References:  <3.0.32.20010819134033.0287f5cc@smtp.magix.com.sg>

next in thread | previous in thread | raw e-mail | index | archive | help
At 12:26 AM 8/19/2001, you wrote:
>You may also be backdoored; if you weren't running something like tripwire
>to catch changes in your system files, you may want to go ahead and
>re-install FreeBSD entirely. May not be necessary, but it shouldn't hurt.

Would deleting /usr/src, cvsuping all the source, making world and 
replacing all the files in /usr/local/etc and /etc remove the backdoors? or 
is it necessary to wipe the hard disk and install everything all over again?

Thanks

Rami AlZaid  <rami (at) alzaid (dot) com>  *  ICQ # 1071118
WebPages: www.alzaid.com  *  www.wooyeah.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5.1.0.14.2.20010819201719.02396ff0>