Re: Check If Your Distro Is Vulnerable To XZ Backdoor

On 4/1/24 14:50, candycanearter07 wrote:

 

Physfitfreak <physfitfreak@gmail.com> wrote at 18:46 this Monday (GMT):

On 4/1/24 13:40, candycanearter07 wrote:

which sshd

>
I get:
>
hydrogen@hydrogen-OptiPlex-7050:~$ which sshd
hydrogen@hydrogen-OptiPlex-7050:~$
>
as if it just ignored it.
>
>

>
>
Weird, probably means it's not installed..

>
I get the same result with command,
>
which
>
by itself. So it is something about the command, not sshd.

>
>
No, the command: which exists of course but requires an argument or
file. I don't know why running it by itself doesn't give error saying it
requires a file or argument.
>
It responds to command: which ls   as it's supposed to. So sshd,
whatever it is, is certainly not on my system.
>
>

>
>
Does sshd need to be on the system for security? Or is it the sshd
itself that has provided a backdoor?

>
>
Unless you need to remote into your computer, sshd isnt /neccesary/.

>
>
Oh, ok. I'll uninstall the two packages then. Thanks.

 
 
No problem. I have it installed as a backup, but leave the server off
unless I need it.

>
I uninstalled both packages, and yet when I run the command it still
says sshd is there:
>
hydrogen@hydrogen-OptiPlex-7050:~$ which sshd
/usr/sbin/sshd
>
>
So it evidently cannot be removed by uninstalling. Is that how that
"back door" works? I think I'll just directly delete it then.
>
>
>
>