Przekazana: Odp: RE: help i've been hacked. :(

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



of course
  "mount -t <fs_type> /path/to/XYZ.image /mnt/XYZ"
should be 
  "mount -t <fs_type> -o loop /path/to/XYZ.image /mnt/XYZ"

bartek

>>> Bartosz Brewinski 2005-08-21 15:54:41 >>>
>>> cparker@xxxxxxxxxxxx 2005-08-21 00:39:48 >>>

> At this point I have not checked for a rootkit, though I plan to do
that
> before I wipe the box.

I think you should consider dumping partition data to some image ("dd
if=/dev/XYZ of=/abc/XYZ.image").

Benefits:
1) you could reinstall the machine without worrying about loss of
data/evidence/configuration.
2) you could examine disk contents many times later on some other
machine ("mount -t <fs_type> /path/to/XYZ.image /mnt/XYZ").

bartek

-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

[Index of Archives]     [CentOS]     [Kernel Development]     [PAM]     [Fedora Users]     [Red Hat Development]     [Big List of Linux Books]     [Linux Admin]     [Gimp]     [Asterisk PBX]     [Yosemite News]     [Red Hat Crash Utility]


  Powered by Linux