On Wed, Sep 22, 2004 at 12:42:10PM +0200, Christophe Chisogne wrote:
> Is there any reason for Debian to include logs in files checked by aide?
> If that's not the case, why not simply use
>       !/var/log
> in Debian's default aide.conf ?

So a rootkit placed in /var/log would not even show up in the aide log
if the script kid were absolutely stupid?

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to