Re: [cobalt-users] Script - *ptrace-kmod* running at the server

[Ryan Verner <xfesty@xxxxxxxxxxxxxxxxxxxxxxxxx>]

On 02/01/2004, at 4:45 PM, Swapana Ghosh wrote:

> Hi
>
>          At one of our Cobalt Raq4r server i am seeing occassioanally 
> the
> the script *ptrace-kmod* to run..

<snip>

> Every where it is suggested to patch the OpenSSL and kernel.. But we
> patch the server regularly.  So how can i stop this *hacker's* script
> to run at our server...

Define 'patch' - Sun's patches definitely aren't enough, sadly :-(

> What harm the script can do in the server?

Anybody with access to a user account on your system can do whatever 
the hell they want with root privileges.  This ain't a good thing.

What kernel are you running?

R

> Thanks in advance..
>
>
>
>
>
> __________________________________
> Do you Yahoo!?
> New Yahoo! Photos - easier uploading and sharing.
> http://photos.yahoo.com/
>
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users

--

linux.conf.au 2004 - Adelaide, Australia
             http://lca2004.linux.org.au/

"Don't go, and you'll regret it!"