Hello, I have been recenty working on a Mandrake setup, and I found a utility called MSEC. Basically, its purpose is to notify (daily) the admin whether there was a change in world-writable files and open ports (among other things).
Just a couple of questions: 1 - has anyone had any experience/s with this tool ? 2 - is there anything similiar for Debian or Redhat ? 3 - how useful is checking stuff like open ports and the like, if you've been 'root-kitted' ? TIA Stephan http://movies.yahoo.com.au - Yahoo! Movies - Vote for your nominees in our online Oscars pool. -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
