On Fri, Dec 19, 2008 at 12:25:55PM +0100, oneman wrote: > Hi All, > > > chkrootkit is complaining about processes hidden from ps and readdir. So > I'd like to run debsums on them to test the integrity of ps and readdir. > However, 'debsums ps' doesn't work. Wich package name should I use to > check the integrity of these two?
Something that helped me to get a different point of view on such a system was a busybox binary. IIRC we have a package with a rather complete and statically-linked busybox binary. You could also try 'busybox ps' and such. Again, not a fix, but a different point of view. -- Tzafrir Cohen | [email protected] | VIM is http://tzafrir.org.il | | a Mutt's [email protected] | | best ICQ# 16849754 | | friend -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
