Re: empty root history file
Hello, I have logged in today to discover my root history file to be
However my main user 'bart' .bash_history file still contains all the
I know I didn't delete this myself, is there any debian management
process that archives the history contents?
Or should I suspect something else here?
It may well be that someone has root access to your system and that they
may have emptied your history in order to remove evidence of what they
were up to.
Think whether it is possible that anyone knows your root password, or
whether you have an easily guessible root password, and check whether
there are any rootkits on your system.
I am pretty sure that the history does not simply vanish by itself.
NEW Yahoo! Cars - sell your car and browse thousands of new and used cars online! http://uk.cars.yahoo.com/