23-01-04 13:02
Chkrootkit: You have 5 processes hidden
piše DINKO KORUNIĆ
Otkrili smo još jednu "lažnu uzbunu" koju podiže chkrootkit:
Checking `lkm'... You have 5 process hidden for ps command
Warning: Possible LKM Trojan installed
Ako na svom Debian Linuxu imate instaliran grsec kernel, tada za vas vrijedi ovaj odgovor:
Novi grsec kerneli radi sigurnosti ne prikazuju slijedeće kernel procese:
root 2 0.0 0.0 0 0 ? SWN 09:37 0:00 [ksoftirqd/0]
root 4 0.0 0.0 0 0 ? SW< 09:37 0:00 [kblockd/0]
root 7 0.0 0.0 0 0 ? SW 09:37 0:00 [kswapd0]
root 12 0.0 0.0 0 0 ? SW 09:38 0:00 [kseriod]
root 71 0.0 0.0 0 0 ? SW 09:38 0:00 [khubd]
root 105 0.0 0.0 0 0 ? SW< 09:38 0:06 [khsfmodemd]
Dakle, ako koristite grsec kernel (paket kernel-cn), ne morate brinuti. U protivnom...
|