Anyone got low noise usable *TRIPWIRE* config their happy with???

John H. Robinson, IV jhriv at ucsd.edu
Sat Mar 30 00:10:58 PST 2002


On Fri, Mar 29, 2002 at 06:31:56PM -0800, Christian Seberino wrote:
> Darrel
> 
> Thanks for the feedback.  I think monitoring mainly
> the *bin directories for Trojans is a great idea.
> Beyond that not much....

i'd recomend adding /dev to that.  since /dev has a lot of files in it,
it is a great place to hide a root kit.

-john



More information about the KPLUG-List mailing list