Re: RPM aware rootkits?

From: Anton A. Chuvakin (anton@chuvakin.org)
Date: 02/14/02


Date: Thu, 14 Feb 2002 17:56:03 -0500 (EST)
From: "Anton A. Chuvakin" <anton@chuvakin.org>
To: Jose Nazario <jose@biocserver.BIOC.cwru.edu>

Jose and others,

>i whipped up a small tool to do this, modify an RPM database. just peruse
>the RPM API and make a small app to do it. pretty simple to do, really.
Any chance of posting it to the list (or getting it somehow)? It seems
close to what I think I need (see my original message that started this
thread).

Thanks a lot in advance.

Best regards,

-- 
     Anton A. Chuvakin, Ph.D.
     http://www.chuvakin.org
   http://www.info-secure.org