[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-users] pkg.nl.cobalt - Open SSH



> the logs, modify ps to hide what he/she doing.  You can do a md5 checksum
> on the system binaries to see whether they have been tampered with.
> 

more explicitly:

rpm -q --whatprovides /path/to/binary
rpm -V package-without-version

example:

[root /root]# which ls
/bin/ls
[root /root]# rpm -q --whatprovides /bin/ls
fileutils-4.0-1_C1
[root /root]# rpm -V fileutils
[root /root]#

No output is a Good Thing.  man rpm for more details.