>Troy,
>First thing I'd do is "file /bin/login" and make sure it is
>an executable and *NOT* a shell script!

It wasn't.  But it wasn't the same size as /bin/login on another 4.2
machine I have.

>
>Check the date and size on the file.
>
>Do you have a file called /etc/usertty ?
>If so, what's in it?
>
>Maybe need to reinstall util-linux ?
>
I upgraded to the version in the 4.2 udates.

Before I did the upgrade, I rpm -V util-linux on the two servers.  On
reported nothing, but the one that has been having the root login problem
reported this:

[root /etc]# rpm -V util-linux
S.5.....   /bin/login
S.5.....   /usr/bin/chfn
S.5.....   /usr/bin/chsh

What I'm concerned about is if someone has hacked my server. An what else
could/should be checked?

Troy


---------------------------------------------------------------
Troy Jacobson
Trace R&D Center
(608) 263-2124
[EMAIL PROTECTED]



-- 
  PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com/RedHat-FAQ /RedHat-Errata /RedHat-Tips /mailing-lists
         To unsubscribe: mail [EMAIL PROTECTED] with 
                       "unsubscribe" as the Subject.

Reply via email to