On Thursday 05 September 2002 10:48, Emmanuel Lacour wrote: > On Thu, Sep 05, 2002 at 03:10:13PM +0700, Indra Kusuma wrote: > > On Thu, 5 Sep 2002, David Raulo wrote: > > > > # > Did you login via SSH ?? > > # > > > # > > # No (I don't have a sshd running). The problem occurs when I log > > # directly on console, or when I do "su -" from an xterm. > > # Have you got an idea? > > > > hmm .. strange, when you "su -" then its use login > > if your box has been rooted, posible backdoor is in the /bin/login > > maybe you should re-install the login package, just to make sure. > > > > but before that please recheck /etc/login.defs, /etc/profile, > > /etc/bashrc, ~/.bashrc > > Root path is defined in /root/.profile under debian potato/woody/...
thanks, that was the problem. For some unknown reason I didn't have a /root/.profile on this machine, and my other (working) woody box did have one (freshly installed with woody last week). Sorry, I should have noticed this. So, if I understand correctly, here is finally how the PATH variable is defined when root logs on console : - /etc/login.defs defines PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/bin/X11:/usr/local/sbin:/usr/local/bin - /etc/profile (at least, mine) rewrites it with PATH="/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games" - /root/.profile then replaces it again by PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/bin/X11 well, why not? Thanks for your help, David.
