LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 08-14-2004, 01:50 AM   #1
poboy
LQ Newbie
 
Registered: Aug 2004
Distribution: redhat
Posts: 1

Rep: Reputation: 0
How can i overwrite /sbin/init?


First I got this problem with printing, everytime i print nothing comes out so i decided to shutdown(shutdown -h now). the linux. but it won't shutdown it says something like error in printing... FUCK : I've got signal 11. so i was force to push the power button. hoping it will be okay after a restart. but something went wrong it can boot it says recovering or checking memory ### : okay. so i thought a had a memory problem and decided to check the memory and it seems okay. i've read somewhere that maybe the /sbin/init has been hacked or corrupted. so a tried to use linux rescue (redhat 7.1). then i use this command to login mount -t ext2 /dev/sda7 /tempdir, chroot /tempdir, su. so i'm IN. then i tried to copy the original init to a floppy drive using mcopy. then use the mv command to move to init file to another directory. i got permission denied. so i sue rm command to delete to file then i've got this segmentation error. tried using cp command too but still to no avail? Is there anybody who could help me overwrite the old init. I'm very Frustrated and desperate. help pls help

thanks
 
Old 08-14-2004, 01:58 AM   #2
ToniT
Senior Member
 
Registered: Oct 2003
Location: Zurich, Switzerland
Distribution: Debian/unstable
Posts: 1,357

Rep: Reputation: 47
Sounds like a hardware failure, probably memory. cp shouldn't segfault spontaneously.
 
Old 08-28-2004, 09:29 AM   #3
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,331
Blog Entries: 55

Rep: Reputation: 3531Reputation: 3531Reputation: 3531Reputation: 3531Reputation: 3531Reputation: 3531Reputation: 3531Reputation: 3531Reputation: 3531Reputation: 3531Reputation: 3531
Sounds like a hardware failure, probably memory. cp shouldn't segfault spontaneously.

The line " FUCK : I've got signal 11" is typical for SuckIT rootkit's /sbin/init. BTW, the line should read something like "FUCK: I've got signal 11 while manipulating the kernel", which kinda shows how important it is to post correct and full errors.
Poboy, if this box is still connected to the 'net, disconnect it. From another box read the typical "help, I got hacked" posts in the Linux - Security forum about how to mop up. Else ask for the thread to be moved to that forum. Please check out the LQ FAQ: Security references, part #1: "Compromise, breach of security, detection".
 
Old 08-28-2004, 09:40 AM   #4
Crunch
Member
 
Registered: Feb 2003
Location: York, PA
Distribution: Slackware, FreeBSD, OpenBSD
Posts: 162

Rep: Reputation: 30
Well, you probably cannot execute init since it is not executable... well to my knowledge that is. I thought init was loaded at boot time. That's your one process that should always be running.

Edit/Note: Permissions on my OpenBSD box (this may vary for yours though) show...
Quote:
-r-x------ 1 root bin
This might help a little bit, to check yours just ls -l the file.

Last edited by Crunch; 08-28-2004 at 09:42 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
boot failure- sbin/init missing? help whatpot Ubuntu 3 10-28-2009 12:39 AM
INIT: cannot execute /sbin/agetty xrado Slackware 5 08-06-2005 05:44 AM
/sbin/init errors on boot dereko Debian 2 03-17-2005 11:56 AM
/sbin/init problems with initrd-boot Fonk Linux - Software 1 03-06-2005 01:48 PM
why would kernel not start /sbin/init liyuheu Linux - Newbie 5 09-03-2004 01:13 AM


All times are GMT -5. The time now is 03:50 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration