Re: Attack on Linux

* Moe Trin wrote in alt.os.linux.suse:

Accoring to a post to the Usenet newsgroup 'comp.os.linux.security'
yesterday, John E. Davis (author of slang, slsh, and the slrn news tool)
stated that chkrootkit didn't detect this root kit (surprise, surprise).
That post included a URL to a script he created that was able to detect
the 'phalanx2' rootkit. He's using a somewhat different technique from
the hints mentioned by CERT/


FYI:

Message-ID: <slrngbasih.q32.jed@xxxxxxxxxxxxxx>

--
David
.