我看过一些关于检查 rootkit 的帖子,但没有找到任何关于它们如何进入 linux 系统的信息。特别是如果您利用 php 网站中的错误(是的,我在这里谈论的是drupageddon)是否可以安装 rootkit,即使您只能作为网络服务器(www-data)而不是作为 root 运行。我发现的有关如何安装它们的很少信息表明您必须是 root 用户才能安装它们(请参阅此处)。
运行时我得到以下输出sudo apt-get update:
Ign https://repo.varnish-cache.org trusty Release
Ign https://repo.varnish-cache.org trusty/varnish-4.0 amd64 Packages/DiffIndex
Ign https://repo.varnish-cache.org trusty/varnish-4.0 i386 Packages/DiffIndex
Ign https://repo.varnish-cache.org trusty/varnish-4.0 Translation-en_US
Ign https://repo.varnish-cache.org trusty/varnish-4.0 Translation-en
Err https://repo.varnish-cache.org trusty/varnish-4.0 amd64 Packages
gnutls_handshake() failed: Handshake failed
Err https://repo.varnish-cache.org trusty/varnish-4.0 i386 Packages
gnutls_handshake() failed: Handshake failed
Fetched 5,403 kB in 10s (506 kB/s)
W: Failed to fetch https://repo.varnish-cache.org/ubuntu/dists/trusty/varnish-4.0/binary-amd64/Packages gnutls_handshake() failed: Handshake failed
W: Failed to fetch https://repo.varnish-cache.org/ubuntu/dists/trusty/varnish-4.0/binary-i386/Packages gnutls_handshake() failed: Handshake failed
E: Some index files failed to download. They have been …Run Code Online (Sandbox Code Playgroud)