[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] [RaQ4] removing old chrootkit
- Subject: Re: [cobalt-users] [RaQ4] removing old chrootkit
- From: Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>
- Date: Fri Jul 19 05:17:04 2002
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
On Fri, 19 Jul 2002, William J.A. Brillinger wrote:
> Good day,
>
> What is the correct procedure for removing an old program like chrootkit?
> (please don't flame me, I know I'm stupid!)
>
> Can I just delete its directory?
>
In the case of a program like chrootkit, deleteing the directory is fine.
But most programs propgate data all over the system. To cmpletely remove
this type of a program you have to hunt the buggers down and delete them.
The advantage of (most) rpms, is that they hunt the files down and delete
them when you uset the '-e' option.
--
Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>
http://frontstreetnetworks.com | Website Hosts & SOHO Networks
229 Front Street, Ste.#C, New Haven, CT. 06513 United States
voice +1 302-785-0699 | fax +1 203-785-1787