LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 01-11-2005, 02:52 PM   #1
ryedunn
Member
 
Registered: Jul 2003
Location: Chicago
Distribution: Fedora, ubuntu
Posts: 458

Rep: Reputation: 30
chrootkit error = Format HD


Sorry for the slew of questions lately, Im just trying to get some security on my box....

So when running chkrootkit I get the error...
Checking `z2'... user root deleted or never loged from lastlog!

so I manually run lastlog and sure enough....
Username Port From Latest
root **Never logged in**

I have read that some other users have had this problem but they never logged in as root, only su (heck, I thought it was the same thing). I too have never actually logged in as root.

I log in via SSH, su root and run lastlog again, it still says root has never logged in.... OKAY now Im worried... and before I go nuke my hole box, Im curious if there is any other tips or tricks I should try before wiping everything clean?
 
Old 01-11-2005, 05:26 PM   #2
rbochan
Member
 
Registered: Dec 2004
Location: Central New York
Distribution: Debian
Posts: 218

Rep: Reputation: 30
Re: chrootkit error = Format HD

Quote:
Originally posted by ryedunn
...I too have never actually logged in as root.

I log in via SSH, su root and run lastlog again, it still says root has never logged in....
Log in as root from a console (not a terminal window), it should show up then. Using su is not the same as logging in as root at a console.
 
Old 01-11-2005, 09:51 PM   #3
ryedunn
Member
 
Registered: Jul 2003
Location: Chicago
Distribution: Fedora, ubuntu
Posts: 458

Original Poster
Rep: Reputation: 30
That was it!
Youre a life saver... thank you very much!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Format error Gimmick Mandriva 2 07-13-2005 09:23 PM
cracked or not cracked (tripwire & chrootkit) ddaas Linux - Security 1 04-27-2005 07:29 AM
QMAIL error:554 Transaction failed: message format error mpk25 Linux - Software 1 10-15-2004 12:53 PM
MDK 9.1 Fatal Error in Stage 1: Exec Format Error Beano Mandriva 5 09-12-2004 03:04 PM
Format error. TuxToaster Linux - General 6 07-15-2004 02:08 PM


All times are GMT -5. The time now is 09:08 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration