OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: chfn, date, chsh INFECTED according to chkrootkit

From: Matt Piechota (piechotaargolis.org)
Date: Wed Aug 18 2004 - 11:41:42 CDT

On Wed, 18 Aug 2004, Thordur Ivar B. wrote:

> Yes ofcourse you will need to trust your own toolchain and compiler (I keep
> "trusted" binarys on CD to use in cases like this. (And for post-mortem
> inspection.)

I'm curious, where do the "trusted" binaries come from? In theory,
the FreeBSD build machine could have been hacked a long time ago and the
hack keeps propagating.

--
Matt Piechota
_______________________________________________
freebsd-securityfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribefreebsd.org"