Skip to Content.
Sympa Menu

sm-grimoire - Re: [SM-Grimoire]OpenSSH trojan....

sm-grimoire AT lists.ibiblio.org

Subject: Discussion of Spells and Grimoire items

List archive

Chronological Thread  
  • From: Jon Svendsen <jon-sven AT frisurf.no>
  • To: Dufflebunk <dufflebunk AT dufflebunk.homeip.net>
  • Cc: Andrew Stitt <afrayedknot AT thefrayedknot.armory.com>, "Sergey A. Lipnevich" <sergeyli AT pisem.net>, SourceMage Grimoire <sm-grimoire AT lists.ibiblio.org>
  • Subject: Re: [SM-Grimoire]OpenSSH trojan....
  • Date: 03 Aug 2002 00:46:23 +0200

On Fri, 2002-08-02 at 09:35, Dufflebunk wrote:
> You should not have to rebuild anything except perhaps the stuff you
> have built since you cast the bad openSSH. cast --fix does MD5 checking
> on all files and will detect tampering (except on config files!). At
> least, this is my understanding of part of what --fix does... and I've
> always thought it one of to cooler features, a light weight IDS built
> in.

Unless the intruder knew his way around sorcery, in which case he would
simply update the md5log after installing the altered binaries.





Archive powered by MHonArc 2.6.24.

Top of Page