lkml.org 
[lkml]   [1999]   [Dec]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: malware defense
On Sat, 4 Dec 1999, Jeffrey B. Siegal wrote:

> Alex Belits wrote:
> > I assume that after intruder/script/trojan/virus got root access, there
> > is nothing reasonable that can be done except wiping out and reinstalling
> > the system IMNSHO efforts should be made only to prevent that from
> > happening, not to find a way to fight already lost battle.
>
> Well, no. You can reboot from non-writable media containing a known-good
> kernel and signature checker and use that to check signatures on the rest of
> your system.
>

Then it will be too late. It may be useful only as the last resort
measure, but relying on such a thing will be stupid.

--
Alex

----------------------------------------------------------------------
Excellent.. now give users the option to cut your hair you hippie!
-- Anonymous Coward


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:55    [W:0.078 / U:0.208 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site