maemo.org - Talk - View Single Post - Security: Carrier IQs "rootkit" on N9* ?

msa2	2011-12-01 , 09:21
Posts: 3 \| Thanked: 1 time \| Joined on Oct 2011	#14

Originally Posted by PMaff

Is there some kind of list of proven items on the N900 / N9?
Some kind of intrusion detection list, that shows which are regular
programs, libraries that we know what they do?
Perhaps with some md5 sums?

Well, on N9 Aegis active might be helpful

! Nothing
executes unless the hash of the executable is listed
in /var/lib/aegis/refhashlist.

After each install (dpkg), that changes some executable,
a new /var/lib/aegis/refhashlist is generated and old one
is stored under name /var/lib/aegis/refhashlist.backup.

So simple diff between files will tell what changed.

Quote & Reply |

The Following User Says Thank You to msa2 For This Useful Post:
zeebra