From owner-freebsd-security Tue May 29 11:30:59 2001 Delivered-To: freebsd-security@freebsd.org Received: from saturn.sit.edu.my (saturn.sit.edu.my [202.184.64.24]) by hub.freebsd.org (Postfix) with ESMTP id 4646337B422 for ; Tue, 29 May 2001 11:30:56 -0700 (PDT) (envelope-from Lim.Seng.Chor@sit.edu.my) Received: from LION (pmail.sit.edu.my [202.184.64.6]) by saturn.sit.edu.my (8.11.4/8.11.3) with ESMTP id f4TIamW11921; Wed, 30 May 2001 02:36:51 +0800 Received: from LION/SpoolDir by LION (Mercury 1.47); 30 May 01 02:33:56 +0800 Received: from SpoolDir by LION (Mercury 1.47); 30 May 01 02:33:48 +0800 From: "Lim Seng Chor" Organization: Sepang Institute of Technology To: freebsd-security@freebsd.org Date: Wed, 30 May 2001 02:33:41 +0800 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Re: freebsd rootkit Cc: Christian Kuhtz , ferdl@atommuell.oeh.uni-linz.ac.at, kaworu@sektor7.ath.cx Message-ID: <3B145C04.31331.8C0610@localhost> In-reply-to: <20010529142422.U24763@ns1.arch.bellsouth.net> References: <3B145A16.26692.847EDF@localhost>; from Lim Seng Chor on Wed, May 30, 2001 at 02:25:28AM +0800 X-mailer: Pegasus Mail for Win32 (v3.12c) Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org sorry, you all misunderstood me... : ( i am the system admin of my site here, and i am suspecting my user is compromising my system files. i would like to check on what the files availble in rootkit, and see whether my users are using that or not. it is just for security audit purpose.... stop xxxxxxx me please.... To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message