diff options
Diffstat (limited to 'system/unhide/README')
| -rw-r--r-- | system/unhide/README | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/system/unhide/README b/system/unhide/README new file mode 100644 index 0000000000..a5c77eb447 --- /dev/null +++ b/system/unhide/README @@ -0,0 +1,12 @@ +Unhide is a forensic tool to find processes and TCP/UCP ports hidden by +rootkits, Linux kernel modules or by other techniques. It includes unhide +and unhide-tcp. + +NOTES: The SlackBuild script builds only unhide-tcp and unhide-linux26. +The original unhide for 2.4 kernels is not built for obvious reasons. +unhide-linux26 has been linked to "unhide", as many apps (rkhunter, for +example) expect to find it here. This is also the solution chosen by many +distributions. + +Remember to run unhide as root only. Failing to do so could result in +a massive arrival of false positives. |