-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 03 Feb 2003 16:46:40 +1100, Stephen Kuhn wrote:
> On my relatively NEW load of RH 8.0, I was trying to compile a program's > dependencies with CPAN - after about 15 minutes or so, the screensaver > in KDE kicked on...but I let it continue to run. After about 20 minutes, > I tried to get past the screensaver - password bad. I then tried to ssh > into the box from my server and same thing - password incorrect. I tried > telnetting from the server with two other user logins, no go. Very > quickly I ran chkrootkit on the server and the mailserver, and found > nothing - firewall appears to be normal as well - but this box just > "went south" as it were. > > Currently, I'm reloading RH 8.0 on it after blowing out the disk > partitions and all the work that I've done on this box - the question > remains, was this a corrupted /etc/passwd issue, or was it somehow > hacked? I cannot retrieve the logfiles from the system as it's been > blown out, Why? Surely you can reboot the machine and get past the passwd check. It's too late to analyze the problem when all evidence has been removed. - -- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iD4DBQE+Pj9w0iMVcrivHFQRAgnOAJdxgEDqa5DSy+wSVLmZEzXejmQIAJwMiduY 35ruiU0sbiaJSKEWEQuiYA== =Y8RI -----END PGP SIGNATURE----- -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list
