Linux Debian support - Protection against SuckIt rootkit

Author

Protection against SuckIt rootkit

Markus Wetzel

2006-09-16, 1:16 pm

Dear NG,

last week my server got infected with the SuckIt rootkit (Debian with
2.4 kernel). Fortunately I have discovered this rootkit (chkrootkit) and
reinstalled the system because I didn't know what else has been compromised.

Is there a way to protect my server against a new infection with SuckIt?

Regards,
Markus Wetzel

John Hasler

2006-09-16, 1:16 pm

Markus Wetzel writes:
> Is there a way to protect my server against a new infection with SuckIt?

Yes, of course: install a patched kernel and keep up your security updates
in the future.
--
John Hasler