Re: Hacked or not ?

From: Alex Povolotsky (tarkhil_at_webmail.sub.ru)
Date: 06/12/04

  • Next message: Alex Povolotsky: "Re: Hacked or not appendice" 
    Date: Sat, 12 Jun 2004 17:50:35 +0400
To: freebsd-security@freebsd.org

    On Sat, 12 Jun 2004 14:39:21 +0200
    "Peter Rosa" <prosa@pro.sk> wrote:

    PR> But what about the /var/log/messages logs absence ?
    PR> And, how to test the machine, if it is healthy ?

    Boot from CD and compare md5 checksums on system files. That's the first step.

    Compare your kernel sources with clean ones, rebuild kernel and compare it with the running one. If you're running GENERIC, compare it with the distributed one.

    Compare /modules directory with distribution one.

    Check your (and system) .profile or .login etc.

    After this step, you should have reasonably clean system. 

    -- 
Alex.
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
  • Next message: Alex Povolotsky: "Re: Hacked or not appendice"

    Relevant Pages

    • Re: Comparing contents of folders
      ... Versioning of some dll's is not apparent, so be very sure you have a backup ... of your system files before proceeding. ... > Is the way to compare the contents of two folders to identify duplicate ...
      (microsoft.public.windowsxp.basics)
    • Re: Some questions about stream cyphers.
      ... >> if you want to compare an observed distribution with an expected ... to compare distributions. ... it ignores the ordering between the bins. ... with reasonable expectation values. ...
      (sci.crypt)
    • Re: Regression, T Test
      ... following tests - T-test, correlation, regression, Chi-squared. ... normal/standard distribution quickly as I have to be able tomorrow to ... what test would you use to compare different locations for equality ...
      (sci.stat.math)
    • Re: Linear Regression - Assessment of predictor importance
      ... When I compare the range or ... variability of my parameters, I can only do that when all parameters ... the choice of 'transformation' or metric ... spread out the bulk of *one* distribution, but not the other, ...
      (sci.stat.consult)
    • Re: Comparing medians in five groups
      ... if you are really only interested in the medians (as that aanlysis ... throws information about the distribution away). ... compare the mean rank of the groups. ... would compare the geometric means of the group. ...
      (sci.stat.consult)