> OK, now what?  I gather that I will need to compile a new kernel, change
> the immutable bit in /usr/sbin/*, replace ps, top, ls, init, netstat.
> Anything else?  Any suggestions for plugging the hole after the horse
> has bolted?
> 

>From what I hear, you need to find a clean backup, and restore it.

The box can no longer be trusted.

-- 
Jason Faulkner 
------------------------
OldOs.org Owner/Admin / http://oldos.org / [EMAIL PROTECTED]
------------------------
Certified INGOTS Gold Assessor Trainer / http://www.theingots.org
------------------------
OpenOffice.org Marketing Volunteer / [EMAIL PROTECTED]
--
TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
TriLUG Organizational FAQ  : http://trilug.org/faq/
TriLUG Member Services FAQ : http://members.trilug.org/services_faq/
TriLUG PGP Keyring         : http://trilug.org/~chrish/trilug.asc

Reply via email to