Re: no more /sbin in root path... been rooted?
On Thursday 05 September 2002 10:48, Emmanuel Lacour wrote:
> On Thu, Sep 05, 2002 at 03:10:13PM +0700, Indra Kusuma wrote:
> > On Thu, 5 Sep 2002, David Raulo wrote:
> > # > Did you login via SSH ??
> > # >
> > #
> > # No (I don't have a sshd running). The problem occurs when I log
> > # directly on console, or when I do "su -" from an xterm.
> > # Have you got an idea?
> > hmm .. strange, when you "su -" then its use login
> > if your box has been rooted, posible backdoor is in the /bin/login
> > maybe you should re-install the login package, just to make sure.
> > but before that please recheck /etc/login.defs, /etc/profile,
> > /etc/bashrc, ~/.bashrc
> Root path is defined in /root/.profile under debian potato/woody/...
thanks, that was the problem. For some unknown reason I didn't have a
/root/.profile on this machine, and my other (working) woody box did have
one (freshly installed with woody last week). Sorry, I should have noticed
So, if I understand correctly, here is finally how the PATH variable is
defined when root logs on console :
- /etc/login.defs defines
- /etc/profile (at least, mine) rewrites it with
- /root/.profile then replaces it again by
well, why not?
Thanks for your help,