Received: with ECARTIS (v1.0.0; list linux-xfs); Tue, 16 Sep 2003 13:26:44 -0700 (PDT) Received: from malik.acsalaska.net (malik.acsalaska.net [209.112.155.41]) by oss.sgi.com (8.12.9/8.12.5) with SMTP id h8GKQRYa011552 for ; Tue, 16 Sep 2003 13:26:28 -0700 Received: from erbenson.alaska.net (93-pm18.nwc.alaska.net [209.112.142.93]) by malik.acsalaska.net (8.12.9/8.12.9) with ESMTP id h8GIfxNL039738 for ; Tue, 16 Sep 2003 10:41:59 -0800 (AKDT) (envelope-from erbenson@alaska.net) Received: from plato.local.lan (plato.local.lan [192.168.0.4]) by erbenson.alaska.net (Postfix) with ESMTP id 97F4D39F4 for ; Tue, 16 Sep 2003 10:41:57 -0800 (AKDT) Received: by plato.local.lan (Postfix, from userid 1000) id 0253E40FF35; Tue, 16 Sep 2003 10:41:57 -0800 (AKDT) Date: Tue, 16 Sep 2003 10:41:57 -0800 From: Ethan Benson To: linux-xfs@oss.sgi.com Subject: Re: XFS tree for Red Hat should be moved to at least kernel-2.4.20-20 Message-ID: <20030916184157.GA2643@plato.local.lan> Mail-Followup-To: linux-xfs@oss.sgi.com References: <20030914214745.GD827@plato.local.lan> <46483.213.173.165.140.1063724939.squirrel@imap01.ch.sauter-bc.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="45Z9DzgjV8m4Oswq" Content-Disposition: inline In-Reply-To: <46483.213.173.165.140.1063724939.squirrel@imap01.ch.sauter-bc.com> User-Agent: Mutt/1.3.28i X-OS: Debian GNU X-gpg-fingerprint: E3E4 D0BC 31BC F7BB C1DD C3D6 24AC 7B1A 2C44 7AFC X-gpg-key: http://www.alaska.net/~erbenson/gpg/key.asc Mail-Copies-To: nobody X-No-CC: I subscribe to this list; do not CC me on replies. X-ACS-Spam-Status: no X-ACS-Scanned-By: MD 2.36; SA 2.55; spamdefang 1.54 X-archive-position: 424 X-ecartis-version: Ecartis v1.0.0 Sender: linux-xfs-bounce@oss.sgi.com Errors-to: linux-xfs-bounce@oss.sgi.com X-original-sender: erbenson@alaska.net Precedence: bulk X-list: linux-xfs Content-Length: 1019 Lines: 33 --45Z9DzgjV8m4Oswq Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Sep 16, 2003 at 05:08:59PM +0200, Simon Matter wrote: > No please. There are better solutions than mkfs in most situations. Why > being so afraid about kernel modules and rootkit binaries? Boot from a CD > like knoppix or similar. Then mount all filesystems and examine the > system. First check whether your rpm database has been touched. A recent > backup may help here. Then rpm is your friend by finding out which files no its not, an attacker can modify the rpmdb. --=20 Ethan Benson http://www.alaska.net/~erbenson/ --45Z9DzgjV8m4Oswq Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iEYEARECAAYFAj9nWXUACgkQJKx7GixEevw/pwCeN1mPt6t7NrUzJIgMdmwtO9p5 A/AAnjwciK1tDD/AGRo/3gZiRZdQAuAS =Y7iq -----END PGP SIGNATURE----- --45Z9DzgjV8m4Oswq--