On Fri, Nov 15, 2013 at 6:10 PM, Stephen Reichow
<stephen.reic...@gmail.com>wrote:

> Hello, I have found some components of freedesktop.org are being abused
> in conjunction with a rootkit infection.
>
> http://www.freedesktop.org/wiki/Software/PolicyKit/PluggableArchitecture/
>
> The pluggable architecture is the SSH component of a malware rootkit on my
> computer, giving remote attackers access.
>
> Any help would be appreciated.
>

I don't think PolicyKit is at fault, here. If you have permissions to write
to /usr/lib, where the plugins are stored, you can do a lot of damage by
installing a replacement glibc, for instance.

Do you know how the infection started?


> Thank You -Steve
>
>
>
> _______________________________________________
> xdg mailing list
> xdg@lists.freedesktop.org
> http://lists.freedesktop.org/mailman/listinfo/xdg
>
>


-- 
  Jasper
_______________________________________________
xdg mailing list
xdg@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/xdg

Reply via email to