A new Adore root kit
Posted Mar 21, 2004 1:07 UTC (Sun) by shapr
In reply to: A new Adore root kit
Parent article: A new Adore root kit
You could put the trusted kernel on a bootable cdimage, and set the BIOS to boot from CDROM, where the trusted kernel would only start the system on the hard disk after all checks passed.
That would work for chkrootkit at least, and it would beat the "save to disk on shutdown" trick.
to post comments)