Bugtraq mailing list archives
Re: Sony: The Return Of The Rootkit
From: Chad Perrin <perrin () apotheon com>
Date: Fri, 31 Aug 2007 13:03:25 -0600
On Thu, Aug 30, 2007 at 06:10:25PM +0200, Paul Sebastian Ziegler wrote:
Not everything that interacts with the kernel is a rootkit. Or would anyone want to classify GRSecurity as a rootkit? RBAC will let you hide parts of your filesystem as well...
Actually, the impression I got is that the term "rootkit" was being used correctly in this case -- in that it referred to software that can be used when one has rooted a machine to cover one's tracks. Whether or not software interacts with the kernel really has nothing to do with whether it's a rootkit, and I don't recall seeing anything in the linked discussions of Sony's software that suggested otherwise. -- CCD CopyWrite Chad Perrin [ http://ccd.apotheon.org ] W. Somerset Maugham: "The ability to quote is a serviceable substitute for wit."
Current thread:
- Re: Sony: The Return Of The Rootkit Jason Brooke (Sep 01)
- Re: Sony: The Return Of The Rootkit Paul Sebastian Ziegler (Sep 01)
- Re: Sony: The Return Of The Rootkit Tyler Reguly (Sep 01)
- Re: Sony: The Return Of The Rootkit John Hammond (Sep 01)
- <Possible follow-ups>
- Re: Sony: The Return Of The Rootkit Chad Perrin (Sep 01)
- Re: Sony: The Return Of The Rootkit Juha-Matti Laurio (Sep 01)
- Re: Sony: The Return Of The Rootkit Paul Sebastian Ziegler (Sep 01)