[Techtalk] Re: Different usage betweed df and du

[Glen Strom]

On Wed, 13 Jul 2005 23:57:16 +1000
Sue Stones <suzo at spin.net.au> wrote:

> Wim De Smet wrote:
> 
> >
> >A rootkit perhaps. But I'd think that they'd install a modified df
> >and not bother with the du.
> >
> How would you detect one?
> 
You could also try rkhunter
http://www.rootkit.nl/projects/rootkit_hunter.html


-- 
Glen Strom
gstrom at eol.ca