질문&답변
클라우드/리눅스에 관한 질문과 답변을 주고 받는 곳입니다.
리눅스 분류

서버보안관리실무 책을 보다가 질문입니다.

작성자 정보

  • 박경덕 작성
  • 작성일

컨텐츠 정보

본문

안녕하세요~

항상 많은 도움에 감사드립니다.

홍선생님 서적으로 테스트중에 궁금한것이 있습니다.

Rootkit Hunter 버전별로 실행결과값이 아래와 같이 다른게 나옵니다.

1.2.7은 system tools이 skipped이 되면, 1.2.9는 다른결과 나옵니다.
설치된 리눅스 Linux 2.6.9-42.0.10 입니다

(테스트1)
-------------------------------------------------------------------------
Rootkit Hunter 1.2.7 is running
-------------------------------------------------------------------------
Determining OS... Unknown
Warning: This operating system is not fully supported!
Warning: Cannot find md5_not_known
All MD5 checks will be skipped!

Checking binaries
* Selftests
    Strings (command)                                        [ OK ]

* System tools
     Skipped!

Check rootkits
* Default files and directories
   Rootkit '55808 Trojan - Variant A'...                      [ OK ]
   ADM Worm...                                                [ OK ]
   Rootkit 'AjaKit'...                                        [ OK ]
   Rootkit 'aPa Kit'...                                       [ OK ]
   Rootkit 'Apache Worm'...                                   [ OK ]


(테스트2)
-------------------------------------------------------------------------
Rootkit Hunter 1.2.9 is running
-------------------------------------------------------------------------
Determining OS... Ready

Checking binaries
* Selftests
     Strings (command)                                        [ OK ]

* System tools
Info: prelinked files found
  Performing 'known good' check...
   /bin/cat                                                   [ OK ]
   /bin/chmod                                                 [ OK ]
   /bin/chown                                                 [ OK ]
   /bin/date                                                  [ OK ]
   /bin/dmesg                                                 [ OK ]
   /bin/env                                                   [ OK ]
   /bin/grep                                                  [ OK ]
   /bin/kill                                                  [ BAD ]
   /bin/login                                                 [ OK ]
   /bin/ls                                                    [ OK ]
   /bin/more                                                  [ OK ]
   /bin/mount                                                 [ OK ]
   /bin/netstat                                               [ OK ]
   /bin/ps                                                    [ OK ]
   /bin/su                                                    [ OK ]
   /sbin/chkconfig                                            [ OK ]
   /sbin/depmod                                               [ OK ]
   /sbin/ifconfig                                             [ OK ]
/usr/sbin/prelink: /sbin/init: at least one of file's dependencies has changed since prelinking
   /sbin/init                                                 [ BAD ]
   /sbin/insmod                                               [ OK ]
   /sbin/ip                                                   [ OK ]
   /sbin/lsmod                                                [ OK ]
   /sbin/modinfo                                              [ OK ]
   /sbin/modprobe                                             [ OK ]
   /sbin/rmmod                                                [ OK ]
   /sbin/runlevel                                             [ OK ]
   /sbin/sulogin                                              [ OK ]
   /sbin/sysctl                                               [ OK ]
   /sbin/syslogd                                              [ OK ]
   /usr/bin/chattr                                            [ OK ]
   /usr/bin/du                                                [ OK ]
   /usr/bin/file                                              [ OK ]
   /usr/bin/find                                              [ OK ]
   /usr/bin/head                                              [ OK ]
   /usr/bin/killall                                           [ OK ]
   /usr/bin/lsattr                                            [ OK ]
   /usr/bin/md5sum                                            [ OK ]
/usr/sbin/prelink: /usr/bin/passwd: at least one of file's dependencies has changed since prelinking
   /usr/bin/passwd                                            [ BAD ]
   /usr/bin/pstree                                            [ OK ]
   /usr/bin/sha1sum                                           [ OK ]
   /usr/bin/slocate                                           [ OK ]
   /usr/bin/stat                                              [ OK ]
   /usr/bin/strings                                           [ OK ]
   /usr/bin/top                                               [ OK ]
   /usr/bin/users                                             [ OK ]
   /usr/bin/vmstat                                            [ OK ]
   /usr/bin/w                                                 [ OK ]
   /usr/bin/watch                                             [ OK ]
   /usr/bin/wc                                                [ OK ]
   /usr/bin/wget                                              [ OK ]
   /usr/bin/whereis                                           [ OK ]
   /usr/bin/who                                               [ OK ]
   /usr/bin/whoami                                            [ OK ]
   /usr/sbin/xinetd                                           [ OK ]


   즐거운 하루 보내시고..수고하세요~

관련자료

댓글 0
등록된 댓글이 없습니다.

공지사항


뉴스광장


  • 현재 회원수 :  60,367 명
  • 현재 강좌수 :  37,037 개
  • 현재 접속자 :  258 명