Skip to Content.
Sympa Menu

sm-grimoire - Re: [SM-Grimoire]OpenSSH trojan....

sm-grimoire AT lists.ibiblio.org

Subject: Discussion of Spells and Grimoire items

List archive

Chronological Thread  
  • From: Dufflebunk <dufflebunk AT dufflebunk.homeip.net>
  • To: Jon Svendsen <jon-sven AT frisurf.no>
  • Cc: Andrew Stitt <afrayedknot AT thefrayedknot.armory.com>, "Sergey A. Lipnevich" <sergeyli AT pisem.net>, SourceMage Grimoire <sm-grimoire AT lists.ibiblio.org>
  • Subject: Re: [SM-Grimoire]OpenSSH trojan....
  • Date: 02 Aug 2002 16:51:05 -0400

henh, of course... that's why it's light weight ;)

On Fri, 2002-08-02 at 18:46, Jon Svendsen wrote:
> On Fri, 2002-08-02 at 09:35, Dufflebunk wrote:
> > You should not have to rebuild anything except perhaps the stuff you
> > have built since you cast the bad openSSH. cast --fix does MD5 checking
> > on all files and will detect tampering (except on config files!). At
> > least, this is my understanding of part of what --fix does... and I've
> > always thought it one of to cooler features, a light weight IDS built
> > in.
>
> Unless the intruder knew his way around sorcery, in which case he would
> simply update the md5log after installing the altered binaries.
>
> _______________________________________________
> SM-Grimoire mailing list
> SM-Grimoire AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-grimoire
>
--


Quidquid latine dictum sit, altum sonatur.
-----------------
PGP public key at
http://wwwkeys.ch.pgp.net:11371/pks/lookup?op=get&search=0x92B5D3F1

Attachment: signature.asc
Description: This is a digitally signed message part




Archive powered by MHonArc 2.6.24.

Top of Page