Re: /etc/ioctl.save
On Mon, Jan 12, 2004 at 07:18:54AM -0500, Rohit Kumar Mehta wrote:
>
> I noticed after an unclean shutdown (i.e. a system crash), Tripwire is
> reporting that /etc/ioctl.save has been modified.
> Does anyone know what this is? Is there reason for me to suspect that
> my system has been hacked?
>
Rohit,
In cases like these where you know _exactly_ what you are looking for
Google comes in very handy. Check the following for more information:
http://lists.debian.org/debian-user/2000/debian-user-200005/msg00327.html
http://www.mail-archive.com/debian-user@lists.debian.org/msg72777.html
----------------
Nitebirdz
http://www.sacredchaos.com/
Reply to: