On Fri, Dec 19, 2008 at 12:25:55PM +0100, oneman wrote: > Hi All, > > > chkrootkit is complaining about processes hidden from ps and readdir. So > I'd like to run debsums on them to test the integrity of ps and readdir. > However, 'debsums ps' doesn't work. Wich package name should I use to > check the integrity of these two?
Something that helped me to get a different point of view on such a system was a busybox binary. IIRC we have a package with a rather complete and statically-linked busybox binary. You could also try 'busybox ps' and such. Again, not a fix, but a different point of view. -- Tzafrir Cohen | tzaf...@jabber.org | VIM is http://tzafrir.org.il | | a Mutt's tzaf...@cohens.org.il | | best ICQ# 16849754 | | friend -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
