On Sat, 23 Dec 2000, Eric Clover wrote:
> email from cron::
>
> Date: Wed, 20 Dec 2000 04:02:01 -0600
> From: root <root@g>
> To: root@g
> Subject: errors rotating logs
>
> errors occured while rotating /var/log/wtmp
>
> stat of /var/log/wtmp failed: No such file or directory
>
> Doh!!
> thank you...
>
> eric
>
Watch out, though! This is typical behavior for a cracker. They usually
remove precisely that file, since it's the one used by the 'last' command
and could give them away.
I'd do a thorough check of the system because I'd tend to believe you've
been cracked.
------------------------------------------------------
Nitebirdz
------------------------------------------------------
Thus spake the master programmer:
"You can demonstrate a program for a corporate
executive, but you can't make him computer literate."
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
