On Mon, Jan 12, 2004 at 07:18:54AM -0500, Rohit Kumar Mehta wrote: > > I noticed after an unclean shutdown (i.e. a system crash), Tripwire is > reporting that /etc/ioctl.save has been modified. > Does anyone know what this is? Is there reason for me to suspect that > my system has been hacked? >
Rohit, In cases like these where you know _exactly_ what you are looking for Google comes in very handy. Check the following for more information: http://lists.debian.org/debian-user/2000/debian-user-200005/msg00327.html http://www.mail-archive.com/[EMAIL PROTECTED]/msg72777.html ---------------- Nitebirdz http://www.sacredchaos.com/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]