From owner-freebsd-security Tue May 29 11:45: 8 2001 Delivered-To: freebsd-security@freebsd.org Received: from awww.jeah.net (awww.jeah.net [216.111.239.130]) by hub.freebsd.org (Postfix) with ESMTP id AD7DC37B424 for ; Tue, 29 May 2001 11:45:00 -0700 (PDT) (envelope-from chris@jeah.net) Received: from localhost (chris@localhost) by awww.jeah.net (8.11.3/8.11.3) with ESMTP id f4TIfN398121; Tue, 29 May 2001 13:41:23 -0500 (CDT) (envelope-from chris@jeah.net) Date: Tue, 29 May 2001 13:41:21 -0500 (CDT) From: Chris Byrnes To: Lim Seng Chor Cc: , Christian Kuhtz , , Subject: Re: freebsd rootkit In-Reply-To: <3B145C04.31331.8C0610@localhost> Message-ID: <20010529134040.R98104-100000@awww.jeah.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org That's not a wise request on a list like this. Backup, format and reinstall. Chris Byrnes (chris@JEAH.net) JEAH Communications, LLC (www.JEAH.net) Call toll-free! 1-866-AWW-JEAH On Wed, 30 May 2001, Lim Seng Chor wrote: > sorry, you all misunderstood me... : ( > > i am the system admin of my site here, and i am suspecting my > user is compromising my system files. i would like to check on > what the files availble in rootkit, and see whether my users are > using that or not. > it is just for security audit purpose.... > > stop xxxxxxx me please.... > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message