[Aide] Reporting log files

Marc Haber mh+aide at zugschlus.de
Thu Mar 29 10:41:57 EEST 2007


On Thu, Mar 29, 2007 at 10:25:48AM +0300, Pablo Virolainen wrote:
> Assuming you have break the system, and by breaking into the system, some
> system binary has been changed. When they (the bad guys) get the
> information (the hash value of the original binary) they can feed it back
> so that AIDE won't see the change.

They can feed it back into where? And what keeps them from building
the checksums of the original binary before exchanging it?

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835


More information about the Aide mailing list