How to detect and prevent sedexp malware in Linux
by Stream from LinuxQuestions.org on (#6Q905)
Recently a new malware, sedexp, was detected infecting Linux systems. This malware uses the Kernel module udev which is a replacement for DevFS. The details are given in the link . For this I have the following 2 queries
1) How can it be detected that the udev rule is present in the system?
2) How can this malware be prevented from infecting the system? Is there some configuration changes that can be done?
1) How can it be detected that the udev rule is present in the system?
2) How can this malware be prevented from infecting the system? Is there some configuration changes that can be done?