chfn, date, chsh INFECTED according to chkrootkit

Wed Aug 18 09:41:45 PDT 2004

On Wed, 18 Aug 2004, Thordur Ivar B. wrote:

> Yes ofcourse you will need to trust your own toolchain and compiler (I keep
> "trusted" binarys on CD to use in cases like this. (And for post-mortem
> inspection.)

I'm curious, where do the "trusted" binaries come from?  In theory, 
the FreeBSD build machine could have been hacked a long time ago and the 
hack keeps propagating.

-- 
Matt Piechota