Re: chfn, date, chsh INFECTED according to chkrootkit

From: Matt Piechota (piechota_at_argolis.org)
Date: 08/18/04

  • Next message: David Wolfskill: "Report of collision-generation with MD5" 
    Date: Wed, 18 Aug 2004 12:41:42 -0400 (EDT)
To: "Thordur Ivar B." <thib@mi.is>

    On Wed, 18 Aug 2004, Thordur Ivar B. wrote:

    > Yes ofcourse you will need to trust your own toolchain and compiler (I keep
    > "trusted" binarys on CD to use in cases like this. (And for post-mortem
    > inspection.)

    I'm curious, where do the "trusted" binaries come from? In theory,
    the FreeBSD build machine could have been hacked a long time ago and the
    hack keeps propagating. 

    -- 
Matt Piechota
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
  • Next message: David Wolfskill: "Report of collision-generation with MD5"

    Relevant Pages

    • Re: Unfortunate dynamic linking for everything
      ... then for shells the FreeBSD VM shares maximally without using ... only thing that has changed recently is a few binaries in /bin and /sbin. ... "once during boot" case is interesting in the aggregate, ... Shells, which are run for extended periods of time, and which are ...
      (freebsd-current)
    • Re: ELF dynamic loader name [was: sbrk(2) broken]
      ... While this doesn't count as an explicit vote against the rename, ... gdb is built to debug binaries for a particular architecture. ... this is the first time that FreeBSD ... Now we are concidering to deploy amd64, ...
      (freebsd-current)
    • Re: differences between /bin, /usr/bin and /usr/local/bin
      ... all *existing* versions FreeBSD ships only static binaries in /bin. ... the BSD traditionalists in that thread are ... Sun has announced that there will be no static system libraries at all ...
      (comp.unix.programmer)
    • Re: Security Check Diffs Question
      ... If you have access to the same binaries on another machine, ... > - Most of the inodes staid the same. ... > No form of disk restructuring, fsck, defrag, etc, was initiated by me. ... Version: GnuPG v1.0.6 (FreeBSD) ...
      (FreeBSD-Security)
    • Re: Security Check Diffs Question
      ... If you have access to the same binaries on another machine, ... > - Most of the inodes staid the same. ... > No form of disk restructuring, fsck, defrag, etc, was initiated by me. ... Version: GnuPG v1.0.6 (FreeBSD) ...
      (FreeBSD-Security)