On Wed, May 01, 2002 at 04:37:13PM -0500, Charles Clancy wrote: [ snip: +::0::0 line in /etc/passwd ]
> > any suggestions? Should I be worried??? > > Yes -- you should be very worried! :) I suggest removing the line, and > tracking down how you were attacked. Some tools will convert a blank lines in /etc/passwd to that form, though I don't remember which ones. So this might not be the result of malice, though it should definitely be fixed & investigated. /etc/passwd is very picky about format, and it is counterproductive to leave blank lines or try to comment out lines. Jon Leonard