From owner-freebsd-security@FreeBSD.ORG  Tue Jan 15 07:59:47 2008
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 5408A16A420
	for <freebsd-security@freebsd.org>;
	Tue, 15 Jan 2008 07:59:47 +0000 (UTC) (envelope-from dan@obluda.cz)
Received: from fw.ax.cz (195.22.43.87.adsl.nextra.cz [195.22.43.87])
	by mx1.freebsd.org (Postfix) with ESMTP id A5BBD13C47E
	for <freebsd-security@freebsd.org>;
	Tue, 15 Jan 2008 07:59:46 +0000 (UTC) (envelope-from dan@obluda.cz)
Received: from [172.20.1.4] (vlasta.hide.ax.cz [172.20.1.4])
	by fw.ax.cz (8.13.8/8.13.8) with ESMTP id m0F7nQw2049026
	for <freebsd-security@freebsd.org>;
	Tue, 15 Jan 2008 08:49:28 +0100 (CET) (envelope-from dan@obluda.cz)
Message-ID: <478C6581.5090603@obluda.cz>
Date: Tue, 15 Jan 2008 08:49:21 +0100
From: Dan Lukes <dan@obluda.cz>
Organization: SISAL, MFF UK
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
	rv:1.8.1.11) Gecko/20071128 SeaMonkey/1.1.7
MIME-Version: 1.0
To: freebsd security <freebsd-security@freebsd.org>
References: <C3B0FF67.4128%klaus.steden@thomson.net>
In-Reply-To: <C3B0FF67.4128%klaus.steden@thomson.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: Anti-Rootkit app
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Jan 2008 07:59:47 -0000

>> Is the main reason to install anti-rootkit we count the intruders are
>> so dumb to look for one of port's anti-rootkit package before they do
>> it's dirt work ?
>>
>> Or I miss something important ?

Klaus Steden wrote:
 > Good security is usually a comprehensive strategy

E.g. "Exactly, you mised nothing important"

;-)

Thanks.

					Dan