This site is now 100% read-only, and retired.

XML logo

trojan-scan
Posted by fsateler on Tue 18 Oct 2005 at 06:00
Tags: none.
I recently installed trojan-scan, following these instructions. Nifty tool. However, I found out 3 things I didn't like: Kopete likes to connect ispell to someone (apparently the msn server) whenever a chat window is opened, and most importantly: sshd runs as root instead of a dedicated user, and smbd opens random ports with the root user. Am I just being too paranoic?
I sent a message to KDE forums about ispell, but I don't really know how to handle these programs. Should I treat them as normal behaviour, or do something about it?

 

Comments on this Entry

Re: trojan-scan
Posted by Anonymous (213.164.xx.xx) on Tue 18 Oct 2005 at 09:51
sshd runs as root, then drops privileges.
smbd is designed to open these random ports, which is why firewalling smb is such a pain.

not sure about ispell, sounds like a misreport.

[ Parent ]