A new Adore root kit
Posted Mar 21, 2004 1:07 UTC (Sun) by
shapr (guest, #9077)
In reply to:
A new Adore root kit by copsewood
Parent article:
A new Adore root kit
You could put the trusted kernel on a bootable cdimage, and set the BIOS to boot from CDROM, where the trusted kernel would only start the system on the hard disk after all checks passed.
That would work for chkrootkit at least, and it would beat the "save to disk on shutdown" trick.
(
Log in to post comments)