lol...I bet I just left root logged in and removed the keyboard and monitor.
<whew> --JATF -----Original Message----- From: Michael Fratoni [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 30, 2002 8:05 AM To: [EMAIL PROTECTED] Subject: Re: Possible Break-in? -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tuesday 30 July 2002 07:52 am, Freivald, Joseph A, SOFED wrote: > Yesterday, I was doing a routine check of the system (logging in with > ssh), and running the 'top' command, I noticed that it said there were > 2 users logged in. So I dropped back to the shell and did a who, and > root was logged in twice. The second one was me, but the first one > said it was logged in from tty1. > > I immediately shut down the external interface and downloaded the logs, > but I'm not sure what to look for, what with all the hits that the > system seems to get. Unless I am mistaken, a user logged in from tty1 is sitting at the console. - -- - -Michael pgp key: http://www.tuxfan.homeip.net:8080/gpgkey.txt Red Hat Linux 7.2 in 8M of RAM: http://www.rule-project.org/ - -- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iEYEARECAAYFAj1GgQEACgkQn/07WoAb/SsuewCeJDW6T7nsOvJxWQEzxiRn27eh /KgAn3LtYOPrdtZc3sbiNtJU6/62lz29 =Ebw8 -----END PGP SIGNATURE----- _______________________________________________ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list _______________________________________________ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
