Re: [SLUG] Weird login behaviour

[Ben de Luca <bedel@xxxxxxxxxxx>]

> BTW - I keep being surprised to hear even security experts advise to 
> run
> "chkrootkit" (and I'm not a security expert or a paranoid user/admin) 
> - if a
> machine was hacked then there is a good chance that "chkrootkit" would
> also be hacked to disguise the rootkit, wouldn't it?  (it's not far 
> fetched -
> see viruses attacking anti-virus programs).

Its just another tool in the box, I have never seen it return a 
positive result. Thats part of the fun of running it im waiting to see 
it do so.






> Cheers,
>
> --Amos
> --
> SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
> Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html