[rescue] small help please.

[Patrick Finnegan]

On Thursday 22 April 2004 10:03, Kevin Loch wrote:
> > great thanks.. saved an install..
>
> I doubt that.  Evidence of root-kit is 100% mandatory
> fresh install from non-writable media.

I think you mean "media that couldn't have been written when you were 
rooted".  Otherwise, you're excluding a system backup, as you usually 
use writable media for that. :)  Of course, you aught to make sure 
you're not restoring a r00ted system, by checking out the backup tape 
contents first.

> > now time to figure out a nice way not to get rooted again.
>
> Firewall?

And making sure your users don't have easily crackable passwords, and 
keeping up to date on patches, and...

Pat
-- 
Purdue University ITAP/RCS        ---  http://www.itap.purdue.edu/rcs/
The Computer Refuge               ---  http://computer-refuge.org