Anyone got low noise usable *TRIPWIRE* config their happy with???
John H. Robinson, IV
jhriv at ucsd.edu
Sat Mar 30 00:10:58 PST 2002
On Fri, Mar 29, 2002 at 06:31:56PM -0800, Christian Seberino wrote:
> Darrel
>
> Thanks for the feedback. I think monitoring mainly
> the *bin directories for Trojans is a great idea.
> Beyond that not much....
i'd recomend adding /dev to that. since /dev has a lot of files in it,
it is a great place to hide a root kit.
-john
More information about the KPLUG-List
mailing list