[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: no more /sbin in root path... been rooted?

On Thu, 5 Sep 2002, David Raulo wrote:

# > Did you login via SSH ??
# >
# No (I don't have a sshd running). The problem occurs when I log directly on
# console, or when I do "su -" from an xterm.
# Have you got an idea?

hmm .. strange, when you "su -" then its use login
if your box has been rooted, posible backdoor is in the /bin/login
maybe you should re-install the login package, just to make sure.

but before that please recheck /etc/login.defs, /etc/profile, /etc/bashrc,


Indra Kusuma
 ,''`. Indra{@,.}Kusuma.OR.ID -> [Security - Debian/GNU Linux - IPv6]
: :' : 0x4D829E49 - 187D 8C98 FB76 E1A8 5558 853A 4795 4FC1 4D82 9E49
`. `'

Reply to: