Installing a compiler by default
Lee Revell
rlrevell at joe-job.com
Fri Jun 16 07:04:15 BST 2006
On Fri, 2006-06-16 at 06:50 +0100, Anders Karlsson wrote:
> Because when you break in via automated means you are probably not
> root, so using the system tools to download a compiler is unlikely to
> be the approach by the intruder. This is all theoretical and
> hypothetical anyway, as no user should be running any services on a
> Ubuntu Desktop install. I mean, who'd install apache to get a
> web-server for the Gnome "user set up a public share directory" or
> install samba and swat to enable file and printer sharing... Remote
> access via ssh or similar it useless as well, no user would install
> that as soon as the install proper had finished, would they?
>
> I *know* the default install does not listen to any ports on a
> non-local interface, *but* within minutes of an install it is _likely_
> it will be. I *know* there is Perl and Python in the install by
> default, but neither of them allow you to rapidly (read automatically
> or through automated means) create a kernel module that patches system
> calls to totally disguise your hacking activities.
Um, you do realize that you have to be root to load kernel modules
right?
Lee
More information about the sounder
mailing list