5 ms·

Is there same thing for Linux?

• ASalazarMX 7y ago
  I can only think of rkhunter or chkrootkit, which are not the same.
• hoistbypetard 7y ago
  No. But we should make a one for systemd now that it has provided similar common persistence mechanisms. Prior to the wide availability of user services, I'd have said that mechanisms for (especially non-root) persistence were too fragmented for a thing like this to be useful for Linux. One that did nothing but scan systemd would probably be worthwhile now, though.
  • app4soft 7y ago
    > one for systemd Is it possible to create for non-systemd?
    • hoistbypetard 7y ago
      You could try and detect some percent of persistent installs. The linked item is scanning launchd. Systemd is very similar for Linux. Non-systemd things are so diverse (IMO) that an attempt would devolve into a generic IPS. Which exist already, kind of suck, and find crapware with varying degrees of success.