> any binaries from your current box - data files only. Without something
And data/config files must be checked. No point pointing back nice secure
binaries if a config file allows something it shouldnt.
You also need to try and identify how the cracker got in. You could rebuild
and leave the same hole open. Turn off every service in the first instance,
until you have updated packages. Turn on only what services you need and
try and restrict these services only to the hosts that you need to serve.
BB
--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug
