[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Am I hacked?



On Thu, Jun 16, 2005 at 07:07:59AM +0200, Laurent CARON wrote:
> Login ID sashroot has uid == 0.
> --WARN-- [pass002w] UID 0 exists multiple times (2) in /etc/passwd.
> --WARN-- [pass012w] Home directory /root exists multiple times (2) in
> /etc/passwd.
> 
> can you please post & copy of /etc/passwd and /etc/group

AFAIK this is perfectly fine. sash is a stand-alone shell with
built-in commands. The sashroot user is a root user (with the same
password as root) that can be used in case you hosed your system and
can't access critical programs like cp, chmod and mount. See 'man
sash'. Try it some time with 'su sashroot'.

So there may still be problems with the original poster, but
it's not in these lines.

-- 
Maurits van Rees | http://maurits.vanrees.org/ [Dutch/Nederlands] 
Public GnuPG key: keyserver.net ID 0x1735C5C2
"Let your advance worrying become advance thinking and planning."
 - Winston Churchill

Attachment: signature.asc
Description: Digital signature


Reply to: