Zero-length bash .history file!
Routinely running chkrootkit yesterday, I noted a warning to the effect that root's bash .history file was found to be zero-length. Since I'm about as sure as I can be that I didn't do that myself, I'm wondering if this means that the system has been cracked. Are there other tests I can run to double-check, somehow? :eek:
Thanks in advance, Denis P.S. I didn't find other threads about this in LQ. |
"Are there other tests I can run to double-check, somehow?"
In SuSE the default history file size is 1000. You can log in as root and use these commands to verify that bash's .history is in fact zero length: echo $HISTFILESIZE echo $HISTSIZE ---------------------- Steve Stites |
All times are GMT -5. The time now is 12:13 AM. |