if 'chmod' didn't work try 'chattr' www.chkrootkit.org may also be useful 'nmap' too
Complete wiping of the system is not always necessary Just be more careful www.tripwire.org Wez On Tuesday 02 Jul 2002 4:18 pm, Gordon Messmer wrote: > You've been hacked. /bin/login has been replaced, and made immutable. > Back up your data files, reformat your hard disks, reinstall linux. > > Apply errata immediately after you get the system up. > > > From: Ramnath Muthukumar [mailto:[EMAIL PROTECTED]] > > > > i am facing a problem in loggin in to my system > > > > it shows the login prompt to enter user id > > when i enter the user id and enter it refreshes and again > > asks for the user id > > > > > > so i tried booting as a single user mode and checked for the > > > > /bin/login command.. it read 0 bytes > > > > so i tryed to replace that login file with another file.. but i could > > nt able to read or write r remove that file.. > > when i tried > > > > rm -f /bin/login (as root in single user mode) > > it gives like this > > > > rm: cannot unlink 'login': Operation not permitted > > _______________________________________________ > Redhat-list mailing list > [EMAIL PROTECTED] > https://listman.redhat.com/mailman/listinfo/redhat-list _______________________________________________ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
