Re: Root is GONE

2003-07-22 Thread Leonard den Ottolander
Hello Mr. L., > I managed to enter through grub After this event, please reinstall your box, because the intruder probably has left backdoors open. After the installation please run all updates, prefereably downloaded with another safe box. Bye, Leonard. -- How clean is a war when you shoot

Re: Root is GONE

2003-07-21 Thread Mr. L.R. Adrian
asswd root" to change the root passwd? Then type reboot??? Les - Original Message - From: "Samuel Flory" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Monday, July 21, 2003 3:23 PM Subject: Re: Root is GONE > Mr. L.R. Adrian w

Re: Root is GONE

2003-07-21 Thread Samuel Flory
Mr. L.R. Adrian wrote: Also, In /etc/ there are three passwd files: passwd passwd- These are normally there. an passwd.OLD This is not normally on most systems. Maybe a someone was editing the password file by hand. Or possibly a broken script. Maybe from some from some script kiddy. the

Re: Root is GONE

2003-07-21 Thread Samuel Flory
remember, or something. Use the redhat install cdrom and type "rescue" at the initial prompt before the cdrom boots. thanks Les - Original Message - From: "Jonathan Bartlett" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, July 21, 2003 2:57 PM Subje

Re: Root is GONE

2003-07-21 Thread Mr. L.R. Adrian
ROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, July 21, 2003 2:57 PM Subject: Re: Root is GONE > IF you have been hacked, you should just backup your data and reinstall. > > Are you sure theres no other way you could have lost your /etc/passwd > file? That's basica

Re: Root is GONE

2003-07-21 Thread Mr. L.R. Adrian
??? thanks Les - Original Message - From: "Jonathan Bartlett" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, July 21, 2003 2:57 PM Subject: Re: Root is GONE > IF you have been hacked, you should just backup your data and reinstall. > > Are you sure the

Re: Root is GONE

2003-07-21 Thread Jonathan Bartlett
IF you have been hacked, you should just backup your data and reinstall. Are you sure theres no other way you could have lost your /etc/passwd file? That's basically the problem - /etc/passwd is either missing or corrupted - and thus it can't find the root user. I don't think shadow has much to