Re: How could this account have been cracked?

Ertugrul Soeylemez wrote:
It could, but it doesn't. A rootkit _could_ do almost anything, but it
only does, what it has been programmed to do. Even simple Netfilter
rules could overrule many rootkits.


What is the "deliverable" of a rootkit? Simply providing root
priviledges to a certain user account, with the benefit of it not
showing up in process listings, etc.?