Re: commands w who finger
Dixit, Viraj [EMAIL PROTECTED] writes: Anyone got an idea why any of these commands w who finger do not show who is logged in. I am logged in as a super user and shows no one logged in. The commands used to work few days ago now nothing. Thanks for the help. Did you change anything? How are the various users logged in? Via ssh? On the console? xterms? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: commands w who finger
No nothing was changed as far as I know. I usually log on as a super user through telnet and there are few others that I have also given access to as a super user. I have not tried the console yet, but what am I looking for. Thanks, VJ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lowell Gilbert Sent: Wednesday, June 15, 2005 8:06 AM To: Dixit, Viraj Cc: freebsd-questions@freebsd.org Subject:Re: commands w who finger Dixit, Viraj [EMAIL PROTECTED] writes: Anyone got an idea why any of these commands w who finger do not show who is logged in. I am logged in as a super user and shows no one logged in. The commands used to work few days ago now nothing. Thanks for the help. Did you change anything? How are the various users logged in? Via ssh? On the console? xterms? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: commands w who finger
On 6/14/05, Dixit, Viraj [EMAIL PROTECTED] wrote: Hi, Anyone got an idea why any of these commands w who finger do not show who is logged in. I am logged in as a super user and shows no one logged in. The commands used to work few days ago now nothing. Thanks for the help. The binaries could have been modified by anyone permitted (or not permitted; script kiddie) to do so? ...D ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: commands w who finger
What's the solution, do I need to rebuid some process or rebooting might solve it. Thanks!! -Original Message- From: Danny [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 15, 2005 8:31 AM To: Dixit, Viraj Cc: freebsd-questions@freebsd.org Subject:Re: commands w who finger On 6/14/05, Dixit, Viraj [EMAIL PROTECTED] wrote: Hi, Anyone got an idea why any of these commands w who finger do not show who is logged in. I am logged in as a super user and shows no one logged in. The commands used to work few days ago now nothing. Thanks for the help. The binaries could have been modified by anyone permitted (or not permitted; script kiddie) to do so? ...D ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: commands w who finger
On 6/15/05, Dixit, Viraj [EMAIL PROTECTED] wrote: What's the solution, do I need to rebuid some process or rebooting might solve it. Thanks!! Assuming I am on the right track (off to a good start - we are!), you could perform a forensic analysis: http://www.l0t3k.org/security/tools/forensic/ ...and/or copy the binary(ies) from a repair/live FreeBSD CD. I am not an expert in this, so there will be others with better advice. ...D ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: commands w who finger
Dixit, Viraj wrote: No nothing was changed as far as I know. I usually log on as a super user through telnet and there are few others that I have also given access to as a super user. I have not tried the console yet, but what am I looking for. Thanks, Urk. squirm Logging in via telnet exposes your password in cleartext. If it wasn't another 'authorized' superuser who changed things, it could easily be that you've been cracked six ways from Sunday. You should definitely reinstall from CD. It is very strongly recommended that you *always use SSH* for remote login, and that you don't give blanket superuser privileges to others -- give them discrete added privileges with sudo, and/or sink their accounts into a jail environment. -- Greg Barniskis, Computer Systems Integrator South Central Library System (SCLS) Library Interchange Network (LINK) gregb at scls.lib.wi.us, (608) 266-6348 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]