On my relatively NEW load of RH 8.0, I was trying to compile a program's dependencies with CPAN - after about 15 minutes or so, the screensaver in KDE kicked on...but I let it continue to run. After about 20 minutes, I tried to get past the screensaver - password bad. I then tried to ssh into the box from my server and same thing - password incorrect. I tried telnetting from the server with two other user logins, no go. Very quickly I ran chkrootkit on the server and the mailserver, and found nothing - firewall appears to be normal as well - but this box just "went south" as it were.
Currently, I'm reloading RH 8.0 on it after blowing out the disk partitions and all the work that I've done on this box - the question remains, was this a corrupted /etc/passwd issue, or was it somehow hacked? I cannot retrieve the logfiles from the system as it's been blown out, but has anyone seen or experienced this as of yet? This is the only box that's had RH 8.0 on it so far - the other boxen happily run RH 7.3 without nary a problem... -- Mon, 3 Feb 2003 16:45:00 +1100 4:45pm up 18:50, 6 users, load average: 0.66, 0.48, 0.37 ------------------------------------------------------------------ | __ __ | kuhn media australia | | / ,, /| |'-. | http://kma.0catch.com | | .\__/ || | | |=================================| | _ / `._ \|_|_.-' | stephen kuhn | | | / \__.`=._) (_ | email: [EMAIL PROTECTED] | | |/ ._/ |"""""""""| | email: [EMAIL PROTECTED] | | |'. `\ | | | icq: 5483808 | | ;"""/ / | | | | | smk ) /_/| |.-------.| | mobile: 0410-728-389 | | ' `-`' " " | Berkeley, New South Wales, AU | ------------------------------------------------------------------ linux user:267497 * RH 8.0 * PC/Mac/Linux/Networking/Consulting ------------------------------------------------------------------ Have you locked your file cabinet? -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list
