On Mon, Jan 12, 2004 at 07:18:54AM -0500, Rohit Kumar Mehta wrote:
> 
> I noticed after an unclean shutdown (i.e. a system crash), Tripwire is 
> reporting that /etc/ioctl.save has  been modified.
> Does anyone know what this is?  Is there reason for me to suspect that 
> my system has been hacked?
> 

Rohit,


In cases like these where you know _exactly_ what you are looking for
Google comes in very handy.  Check the following for more information:

http://lists.debian.org/debian-user/2000/debian-user-200005/msg00327.html

http://www.mail-archive.com/[EMAIL PROTECTED]/msg72777.html


----------------
Nitebirdz
http://www.sacredchaos.com/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to