From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1Ob0ay-000309-8y for garchives@archives.gentoo.org; Tue, 20 Jul 2010 00:22:05 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 72199E09B6; Tue, 20 Jul 2010 00:21:57 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id 4F30FE09B6 for ; Tue, 20 Jul 2010 00:21:57 +0000 (UTC) Received: from corvid.gentoo.org (corvid.gentoo.org [208.92.234.79]) (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id EE2B21B402B for ; Tue, 20 Jul 2010 00:21:56 +0000 (UTC) Received: by corvid.gentoo.org (Postfix, from userid 2104) id E9E532CF3A; Tue, 20 Jul 2010 00:21:55 +0000 (UTC) From: "Joshua Saddler (nightmorph)" To: gentoo-doc-cvs@lists.gentoo.org Subject: [gentoo-doc-cvs] gentoo commit in xml/htdocs/doc/en/security: shb-intrusion.xml X-VCS-Repository: gentoo X-VCS-Files: shb-intrusion.xml X-VCS-Directories: xml/htdocs/doc/en/security X-VCS-Committer: nightmorph X-VCS-Committer-Name: Joshua Saddler Content-Type: text/plain; charset=utf8 Message-Id: <20100720002155.E9E532CF3A@corvid.gentoo.org> Date: Tue, 20 Jul 2010 00:21:55 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-doc-cvs@lists.gentoo.org Reply-to: docs-team@lists.gentoo.org Content-Transfer-Encoding: quoted-printable X-Archives-Salt: b2d3bc4f-c377-4276-8d20-82b6195bd4bc X-Archives-Hash: 3c796124c7bcce33eb74f3ceba35722c nightmorph 10/07/20 00:21:55 Modified: shb-intrusion.xml Log: package move for chkrootkit; reported by rgk via IRC Revision Changes Path 1.6 xml/htdocs/doc/en/security/shb-intrusion.xml file : http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/doc/en/secu= rity/shb-intrusion.xml?rev=3D1.6&view=3Dmarkup plain: http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/doc/en/secu= rity/shb-intrusion.xml?rev=3D1.6&content-type=3Dtext/plain diff : http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/doc/en/secu= rity/shb-intrusion.xml?r1=3D1.5&r2=3D1.6 Index: shb-intrusion.xml =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D RCS file: /var/cvsroot/gentoo/xml/htdocs/doc/en/security/shb-intrusion.xm= l,v retrieving revision 1.5 retrieving revision 1.6 diff -u -r1.5 -r1.6 --- shb-intrusion.xml 1 Nov 2006 08:13:37 -0000 1.5 +++ shb-intrusion.xml 20 Jul 2010 00:21:55 -0000 1.6 @@ -1,5 +1,5 @@ - + =20 @@ -7,8 +7,8 @@ =20 =20 -1.3 -2006-11-01 +2 +2010-07-19 =20
AIDE (Advanced Intrusion Detection Environment) @@ -459,9 +459,10 @@ =20

The best way to use chkrootkit to detect an intrusion is to run i= t -routinely from cron. To start, emerge app-admin/chkrootkit<= /path>. -chkrootkit can be run from the command line by the command of the= same -name, or from cron with an entry such as this: +routinely from cron. To start, emerge +app-forensics/chkrootkit. chkrootkit can be run from= the +command line by the command of the same name, or from cron with a= n entry +such as this:

=20