On Thu, 4 Jun 1998 [EMAIL PROTECTED] wrote:
> My utmp file has been corrupted. in.rlogind has been changed. Has anyone
> heard of using in.rlogind as an exploit? Any ideas on how to find all the
> damage a repair it short of reloading the system?
rpm -Va will verify all the installed files against the stored checksums:
beware that not all changed files are bad (ttys, for example) and that
someone might have changed rpm and its db as well.
Something more radical... disconnect it from the network and reinstall from
a good source the critical packages, such as syslog, portmap, rsh/rlogin,
telnet, well, you get the idea.
Hope this helps,
Andrea.
--
Undergraduate student of Computer Science
Alias: [EMAIL PROTECTED]
Sysadm on cantina.cs.unibo.it
FTP and mirror administrator on caristudenti.cs.unibo.it
Homepage: http://caristudenti.cs.unibo.it/~borgia/
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com/RedHat-FAQ /RedHat-Errata /RedHat-Tips /mailing-lists
To unsubscribe: mail [EMAIL PROTECTED] with
"unsubscribe" as the Subject.
