On October 27, 2009, Maura Monville wrote:
Recently my desktop internet connection was closed by the department systems administrator because of suspicious frequent network accesses. Since I have been running SuSE for many years and never had virus problems I was quite surprised. Anyway, in addition to the regular checks and tests they perform in these cases, I was asked whether there exists a system tool to verify the integrity of the system configuration. Basically they want to double check that all what is currently installed on my system, excluding my own applications, are regular SuSE updated packages rather than some malicious program, rootkit, and so on ... Thank you in advance for your help. Maura
I've used Chkrootkit and rkhunter. I have had trouble in the past with rkhunter not recognizing the SuSE install but there is now a release for 11.1. Double checking the false positives is not a bad thing when there are only a few. What do you have running, automatic updates, ntp, RSS, mail can all access the network automatically have you changed any configurations there? Have they changed their tests? -- Collector of vintage computers http://www.ncf.ca/~ba600 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org