Hello, my question follows from a security-issue. A machines was attacked and /bin/ping was substituted. Why did rkhunter not recognize this substitution? It seems to me that /bin/ping is never checked whether it was substituted or not. What is the reason for this behavior? From my point of view it is important to check all files, where the SUID-Bit is set.
Thanks in advance! Florian ------------------------------------------------------------------------------ Increase Visibility of Your 3D Game App & Earn a Chance To Win $500! Tap into the largest installed PC base & get more eyes on your game by optimizing for Intel(R) Graphics Technology. Get started today with the Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs. http://p.sf.net/sfu/intelisp-dev2dev _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
