> On Feb 23, 2016, at 8:56 AM, Reco <recovery...@gmail.com> wrote: > > First things first, unless someone deliberately customized > it, /etc/rc.local should contain exactly one meaningful line - 'exit > 0'.
It does. See below. > Your result shows entirely different thing though. Well, I just asked egrep to look for the string 'rc.local' anywhere in a filename in /etc. And it found what look to me like a couple hidden mozilla files. In the list of names, not in the execution of the files. > Second, that result means that somebody run at least once Mozilla > Firefox or Debian Iceweasel on this host as root. Definitely not a > crime against a nature, but definitely a sign of a bad taste. That would be me, I'm afraid. IIRC, I thought I was logged into a different computer. It's a vague memory from a long time ago. > A simple 'cat /etc/rc.local' would be even better. root@log:~# cat /etc/rc.local #!/bin/sh -e # # rc.local # # This script is executed at the end of each multiuser runlevel. # Make sure that the script will "exit 0" on success or any other # value on error. # # In order to enable or disable this script just change the execution # bits. # # By default this script does nothing. exit 0 > But, that's assuming > that you can trust your current kernel and userland (see above). Are you saying it would be worthwhile to compare my kernel modules to those in a live CD? Or is that considered overkill and probably not necessary? -- Glenn English