Re: [hlds_linux] Is finding a file called /var/run/console/root:1 bad?

2006-11-28 Thread Erik Hollensbe
On Nov 27, 2006, at 2:24 PM, TwoEyedHuman wrote: Okay. Before I ask any more questions on this list, I'll have to read more on the linux filesystem and the importance of each file. On FreeBSD at least, you can 'man hier' and get a good description of what files should be put in what places.

Re: [hlds_linux] Is finding a file called /var/run/console/root:1 bad?

2006-11-27 Thread TwoEyedHuman
Thank you for your help! Now I know that this file is indeed safe :) There are so many files though to learn.. Dave Dodd wrote: Hi, Re: Added: "/var/run/console/root:1" These files are created & allegedly removed by the pam_foreground module which on Ubuntu is by default configured into

Re: [hlds_linux] Is finding a file called /var/run/console/root:1 bad?

2006-11-27 Thread Dave Dodd
Hi, Re: > Added: > "/var/run/console/root:1" These files are created & allegedly removed by the pam_foreground module which on Ubuntu is by default configured into the file /etc/pam.d/common-session file. The file describes itself as session-related modules common to all services. On one of our

Re: [hlds_linux] Is finding a file called /var/run/console/root:1 bad?

2006-11-27 Thread TwoEyedHuman
Roger that. Are there books on the subject on the importance of files? Erik Hollensbe wrote: On Nov 26, 2006, at 6:08 PM, TwoEyedHuman wrote: I run ubuntu 6.10 i686 with hlds and I never log into the root account itself. I just use sudo and then my password to get root. But, today my tripw

Re: [hlds_linux] Is finding a file called /var/run/console/root:1 bad?

2006-11-27 Thread TwoEyedHuman
Okay. Before I ask any more questions on this list, I'll have to read more on the linux filesystem and the importance of each file. Ian mu wrote: -- [ Picked text/plain from multipart/alternative ] I'd be tempted to do some digging in the other logs like /var/log/auth.log and others for things

Re: [hlds_linux] Is finding a file called /var/run/console/root:1 bad?

2006-11-27 Thread Erik Hollensbe
On Nov 26, 2006, at 6:08 PM, TwoEyedHuman wrote: I run ubuntu 6.10 i686 with hlds and I never log into the root account itself. I just use sudo and then my password to get root. But, today my tripwire found this: It would be in your best interest to: 1) Understand your tools so you can eff

Re: [hlds_linux] Is finding a file called /var/run/console/root:1 bad?

2006-11-27 Thread Ian mu
-- [ Picked text/plain from multipart/alternative ] I'd be tempted to do some digging in the other logs like /var/log/auth.log and others for things around the same time and see if anythings there, fairly hard to tell if its a problem or not just from that alone. On 11/27/06, TwoEyedHuman <[EMAIL

[hlds_linux] Is finding a file called /var/run/console/root:1 bad?

2006-11-26 Thread TwoEyedHuman
I run ubuntu 6.10 i686 with hlds and I never log into the root account itself. I just use sudo and then my password to get root. But, today my tripwire found this: --- Rule Name: System boot changes (/var/run) Severity