> > I'm on the box now and it's quite non-functional.  ctrl+alt+del prints
> > "INIT: cannot execute "/sbin/shutdown".  I'm going to do a hard reset
> > and we'll see what happens.
>
> Since it's acting as your firewall, there's a very large possibility
> that your machine was compromised. That doesn't mean it *is*
> compromised, but the possibility is still there. I would treat
> everything you do from here on out with that assumption.
>
> maybe use portage to check that all the binaries on your computer
> match to what portage thinks it should be.
>
> also look for strange kernel modules
>
> perhaps even booting from some type of rescue/forensic boot cd will help.

If I wasn't hacked, this kind of strange behavior would have to be a
hardware or filesystem problem right?  What are the best ways to check
for that?  Just fsck?

- Grant
-- 
[EMAIL PROTECTED] mailing list

Reply via email to