-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 10 Jan 2002, Charles Galpin posted the following:
CG>Oh boy. I need to recreate some devices but I don't know which ones. CG> CG>Let's say hypothetically (wink wink) I know this idiot who has an old CG>box that he has gotten sloppy about maintaining, yet has a few CG>dependencies on it (like his mothers website). Ohwww. CG> CG>Let's say he didn't upgrade his ssh on that box a while back when the CG>ssh1 vulnerability was announced. Yes, he knows better. CG> CG>Well he got hacked yesterday. So while he was attempting to clean up and CG>buy some time until he could migrate his stuff to another box, he CG>deleted a few files and directories under /dev/ because the exploit was CG>hiding there. CG> CG>He only remebers for sure about deleteting /dev/.xman and /dev/ida. I'm CG>pretty sure .xman was just the crackers stuff, and /dev/ida has been CG>recreated with MAKEDEV, but did delete a few things with the same CG>timestamp of the time of the attack. CG> CG>Hoewever. After this brilliant move and a courtesy reboot after removing CG>ssh, locking the firewall down further, etc, the external ethernet CG>interface won't start. The error messages form ifup eth1 are CG> CG>SIOCSIFADDR: No such device CG>SIOCSIFNETMASK: No such device CG>SIOCSIFBADADDR: No such device CG>SICOADDRT: No such device CG> CG>So I'm pretty sure some more devices need to be recreated. Does anyone CG>know what ones? CG> CG>Please excuse me while I go beat myself ^H^H^H^H^H him some more. CG> CG>thanks CG>charles CG>p.s. please spare me the flogging. I know what I am doing is wrong, but CG>I'm just trying to buy some time (about 2 weeks). At that time the box CG>will be reformatted and repurposed. Why not reinstall the dev rpm? - -- csm Dmitry is free! Boycott Adobe! Repeal the DMCA! Stop the SSSCA! -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iEYEARECAAYFAjw9uKwACgkQv6Gjsf2pQ0oevQCfUN3M1VmtwltCH2yc+AtJwbuL ajoAn1w14wxhdaVz8ehganPoSOd/Eh89 =50ZF -----END PGP SIGNATURE----- _______________________________________________ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
