Re: Userland
If I believed that someone had hacked into my server, would I try to patch and repair and keep the server going? or would I format the box, and rebuild it?
So, consider a server that is part of a highly available cluster farm, that is designed for surviving server failures - A kernel detecting an illegal permission escalation attempt deciding to kernel panic? Well, the system is designed to cope with that. Much safer than having a hacker roaming around your server farm for 3 months before you spot them. How do you unpick that mess? The last 2 weeks backups to the disk backup system wont help, that's for sure.