[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] pkg.nl.cobalt - Open SSH
- Subject: Re: [cobalt-users] pkg.nl.cobalt - Open SSH
- From: "cbtrussell" <cbtrussell@xxxxxxxxxxx>
- Date: Tue Jan 15 04:25:01 2002
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
> > Did you/are going to just do a fresh restore?
>
> once we found the rootkit was NOT in userspace, we used CMU, restored
> the system, and then restored the CMU. Everything worked fine. But we
> did manage to "lose" the rootkit. Which appears to be an LKM that was
> too new or too different to be caught by chkrootkit.
Ah, good info, thanks