Linux Today: Linux News On Internet Time.
Search Linux Today
search.internet.com
Linux News Sections:  Blog -  Developer -  High Performance -  Infrastructure -  IT Management -  Security -  Storage -
Linux Today Navigation
LT Home
Preferences
Contribute
Link to Us
Search
Linux Jobs

Become a Marketplace Partner

internet.commerce
Be a Commerce Partner














The Linux Channel at internet.com
Linux Today
Enterprise Linux Today
Apache Today
JustLinux.com
Linux Planet
PHPBuilder
All Linux Devices
Technology Jobs

JustTechJobs.com

LinuxToday Newsletters
Subscribe News
Subscribe PR
Subscribe Security

internet.com
IT
Developer
Internet News
Small Business
Personal Technology

Search internet.com
Advertise
Corporate Info
Newsletters
Tech Jobs
E-mail Offers

 






Current Newswire:

Ultimate Firefox Productivity Tips: For the Geeks.

GoldenDict: A Dictionary Nugget

Would You Like Linux With Your Jello?

Why I Use Linux: Lofton’s Story

Go to Toys 'R Us for your Linux netbook needs

Sun xVM VirtualBox 3.0: Virtual Developer's Delight

Apple Wary of Ogg Theora: No Agreement Yet on HTML5 Video Standard

Freedom is not Free for Countries nor Computer Users

Eyecandy Themes For Ubuntu - Download directly from Synaptic - No More Hassles

Sifting Through Billions and Billions of Bytes




Security Engineer (PA)
Next Step Systems
US-PA-Philadelphia

Justtechjobs.com Post A Job | Post A Resume
:All About Linux: Various Ways of Detecting Rootkits in GNU/Linux
All About Linux: Various Ways of Detecting Rootkits in GNU/Linux
Dec 19, 2006, 10 :00 UTC (0 Talkback[s]) (4885 reads)

[ Thanks to An Anonymous Reader for this link. ]

"Consider this scenario... Your machine running GNU/Linux has been penetrated by a hacker without your knowledge and he has swapped the passwd program which you use to change the user password with one of his own. His passwd program has the same name as the real passwd program and works flawlessly in all respects except for the fact that it will also gather data residing on your machine such as the user details each time it is run and transmit it to a remote location or it will open a back door for outsiders by providing easy root access and all the time, you will be impervious about its actions. This is an example of your machine getting rooted--another way of saying your machine is compromised. And the passwd program which the hacker introduced into your machine is a trojaned rootkit..."

Complete Story

Related Stories:
HowtoForge: Securing Your Server With A Host-based Intrusion Detection System(Sep 21, 2006)
SearchOpenSource: Rootkit Levels of Infection and Mitigation(Dec 06, 2005)
Linux DevCenter: Using the Root Account on Debian(Dec 05, 2005)
FalkoTimme.com: Bind-Chroot-Howto (Debian)(Feb 08, 2005)



No talkbacks posted.
  Home | Search Talkbacks | Customize View    Top of Page  



Enter your comments below:

* Your Name:

* Your Email Address:

* Subject:

CC: [will also send this talkback to an E-Mail address]

* Comments:

Tags allowed:<I>,<B> and <U>. See our talkback-policy for more about talkback content.

Fields marked with * are required!






..............................




All times are recorded in UTC.
Linux is a trademark of Linus Torvalds.
Powered by Linux, Apache and PHP