> From: "Paul J. Menchini" <[EMAIL PROTECTED]>
> Date: Wed, 1 Aug 2001 14:05:55 -0400 (EDT)
> >> From: "Paul J. Menchini" <[EMAIL PROTECTED]>
> >> Date: Fri, 20 Jul 2001 12:50:26 -0400 (EDT)
>
> >> I discovered that every non-directory file in
> >> / was gone; in particular, the symbolic links /bin, /lib, and /sys (in
> >> addition to /tmp and some local symbolic links) and the files /boot,
> >> /kadb and /vmunix (as well as some backup versions of /vmunix) were
> >> gone. In addition, my bootblocks on / were trashed.
>
> Ok, I've now run the tests from a non-priviledged account, using trace.
> I've had a quick look through the log file, but can't find anything
> suspicious. Can you suggest anything I should look for?
Only the usual: calls to 'unlink' to remove /sys and friends (or any
mention of /sys, for that matter); mention of files under "/dev"; that
sort of thing.
Also, you might try running the tests from a non-privileged account,
but with the HOME environment variable set to "/".
If this doesn't work, I don't know what to suggest other than running
it as root under "trace" on a system that you're willing to regenerate
from scratch after it gets trashed.
