How to deal with a rooted machine (was Re: [plug] Tonights meeting)

[Anthony J. Breeds-Taurima]

On Mon, 24 Jun 2002, Peter Wright wrote:

> Unfortunately, I don't have a CD burner - but aside from the CD-burning,
> that's pretty much what I was going to do. The machine in question can't
> boot from CD (and doesn't have a CD drive anyway), so I was just going to
> rip out the compromised hard disk and mount (ro nosuid noexec) on
> another machine when I have some time to perform a detailed analysis.

If you can get me the HDD and don't mind being without it for a week or so I
can make the CD's for you (and keep a copy for myself :))
 
> Anyone else interested in getting a CD copy of the compromised
> filesystem(s) if I can make one? The disk in question is less than a
> gig, so it should easily fit on a single CD.

Yup.

Yours Tony

Jan 22-26 2003      Linux.Conf.AU       http://conf.linux.org.au/
         The Australian Linux Technical Conference!