Re: /etc/ioctl.save

2004-01-14 Thread Thomas Hood
> I noticed after an unclean shutdown (i.e. a system crash), > Tripwire is reporting that /etc/ioctl.save has been modified. Note that as of sysvinit version 2.85-1 this file is no longer used. Here is the changelog.Debian entry: * Get rid of /etc/ioctl.save, it's a legacy thing

Re: /etc/ioctl.save

2004-01-13 Thread Oliver Fuchs
On Mon, 12 Jan 2004, Rohit Kumar Mehta wrote: > I noticed after an unclean shutdown (i.e. a system crash), Tripwire is > reporting that /etc/ioctl.save has been modified. > Does anyone know what this is? Is there reason for me to suspect that > my system has been hacked? > Hi

Re: /etc/ioctl.save

2004-01-13 Thread Rohit Kumar Mehta
oops! sorry for cluttering the list. Shoulda googled first! Thanks for the direction! Nitebirdz wrote: In cases like these where you know _exactly_ what you are looking for Google comes in very handy. Check the following for more information: http://lists.debian.org/debian-user/2000/debian-us

Re: /etc/ioctl.save

2004-01-12 Thread Oliver Fuchs
On Mon, 12 Jan 2004, Rohit Kumar Mehta wrote: > I noticed after an unclean shutdown (i.e. a system crash), Tripwire is > reporting that /etc/ioctl.save has been modified. > Does anyone know what this is? Is there reason for me to suspect that > my system has been hacked? > Hi

Re: /etc/ioctl.save

2004-01-12 Thread Nitebirdz
On Mon, Jan 12, 2004 at 07:18:54AM -0500, Rohit Kumar Mehta wrote: > > I noticed after an unclean shutdown (i.e. a system crash), Tripwire is > reporting that /etc/ioctl.save has been modified. > Does anyone know what this is? Is there reason for me to suspect that > my system

/etc/ioctl.save

2004-01-12 Thread Rohit Kumar Mehta
I noticed after an unclean shutdown (i.e. a system crash), Tripwire is reporting that /etc/ioctl.save has been modified. Does anyone know what this is? Is there reason for me to suspect that my system has been hacked? Rohit -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of

Re: Changes made to /etc/ioctl.save follow

2003-12-03 Thread Miquel van Smoorenburg
In article <[EMAIL PROTECTED]>, Oliver Fuchs <[EMAIL PROTECTED]> wrote: >But to be honost I do not know which programm isusing /etc/ioctl.save. It's init (process #1). /etc/ioctl.save saves the stty(1) settings of the console. This is because originally, Linux and Unix

Re: Changes made to /etc/ioctl.save follow

2003-12-03 Thread Bob Proulx
Oliver Fuchs wrote: > Changes made to /etc/ioctl.save follow: > Binary files /var/lib/changetrack/etc:ioctl.save.yesterday and /etc/ioctlsave > differ > My question is which programm is using/is causing the changes in ioctl.save. Guessing 'setserial'. Check /etc/s

Changes made to /etc/ioctl.save follow

2003-12-02 Thread Oliver Fuchs
Hi, I am using changetrack in my debian-woody system. About a week now I receive the following log-entry: [...] Changes made to /etc/ioctl.save follow: Binary files /var/lib/changetrack/etc:ioctl.save.yesterday and /etc/ioctlsave differ [...] My question is which programm is using/is

Re: /etc/ioctl.save?

2000-05-04 Thread Harald Weidner
Hello, Marc Haber <[EMAIL PROTECTED]> wrote: >I'd like to know what /etc/ioctl.save is and to which package it >belongs. That file gets touched on every system boot and therefore >needs special attention with the IDS. Any hints how to stop that >behavior or what packag

/etc/ioctl.save?

2000-05-03 Thread Marc Haber
Hi! I'd like to know what /etc/ioctl.save is and to which package it belongs. That file gets touched on every system boot and therefore needs special attention with the IDS. Any hints how to stop that behavior or what package to file a bug against? Greetings