4 ms·

Maybe I misunderstood the grammar somehow, but did you just say: > This rootkit provides various backdoors allowing to get root ssh access followed by: > thi

Maybe I misunderstood the grammar somehow, but did you just say: > This rootkit provides various backdoors allowing to get root ssh access followed by: > this package won't hurt you badly Allowing root ssh is the ultimate death of your machine's security. Having this installed hurts you badly.

StavrosK 13y ago
> Allowing root ssh is [...] your machine's security. Taking stuff out of context is fun! He said it won't hurt you badly as long as you don't run it as root. From that, I understand that it can't install itself unless it's run as a privileged user.
- ubershmekel 13y ago
  Thanks for that, I guess I misread a bit. So what he's saying is that there's no privilege escalation exploit packaged with this rootkit. Gotcha. Still I wouldn't mention "this package won't hurt you" along with such a tool. Many userland exploits exist.
  - StavrosK 13y ago
    I agree with that, I'd be wary of it.
  - martius 13y ago
    Sorry, I wrote my comment quickly, this is what I meant. I said that "it won't hurt you" as a reaction to people saying "I won't even click on that link" in some comments.
csdreamer7 13y ago
I'm reading the entry on blackhatlibrary. It seems you first have to get root access to copy in (overwrite?) libselinux.so. Then it gets you all sorts of backdoors that gives you root access on a machine.