[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: More potato->woody upgrade problems...



On Wed, Jul 31, 2002 at 08:29:28AM +0200, Turbo Fredriksson wrote:
> Following my libc6/dpkg problems, this time it's fileutils!

> Something must be weird in my filesystem (or I've been hacked!)
> 
> ----- s n i p -----
> meduza:/var/cache/apt/archives# ls -l /bin | grep 500
> -rwxr-xr-x   1 500      500         36188 Jul 28 12:24 login
> -rwxr-xr-x   1 500      500         39696 May  6  2000 ls
> -rwxr-xr-x   1 500      500         54152 Apr 24  2000 netstat
> -rwxr-xr-x   1 500      500         62920 Jan 11  2000 ps
> meduza:/bin# ls -l /sbin/  | grep 500
> -rwxr-xr-x   1 500      500         31504 Apr 24  2000 ifconfig
> -rwxr-xr-x   1 500      500         26496 Sep 15  1999 syslogd
> meduza:/var/cache/apt/archives# chown root.root /bin/*
> chown: /bin/login: Operation not permitted
> chown: /bin/ls: Operation not permitted
> chown: /bin/netstat: Operation not permitted
> chown: /bin/ps: Operation not permitted

Umm, dodgy! If you are root the only thing that could stop that chown would
be the immutable bit on the /bin directory. Use lsattr and chattr.

Maybe you have been hacked.

Good luck!
-- 
Martijn van Oosterhout   <kleptog@svana.org>   http://svana.org/kleptog/
> There are 10 kinds of people in the world, those that can do binary
> arithmetic and those that can't.



Reply to: