LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 10-12-2005, 05:00 PM   #1
joose
LQ Newbie
 
Registered: Oct 2005
Posts: 7

Rep: Reputation: 0
Nevermind


Nevermind

Last edited by joose; 10-12-2005 at 05:16 PM.
 
Old 10-12-2005, 05:19 PM   #2
XavierP
Moderator
 
Registered: Nov 2002
Location: Kent, England
Distribution: Debian Testing
Posts: 19,192
Blog Entries: 4

Rep: Reputation: 475Reputation: 475Reputation: 475Reputation: 475Reputation: 475
It is considered good site etiquette to leave the problem up and then, when you work it out, to post up the solution so others will know what to do.
 
Old 10-12-2005, 05:28 PM   #3
joose
LQ Newbie
 
Registered: Oct 2005
Posts: 7

Original Poster
Rep: Reputation: 0
Got you.

Friend told me to type in who

Showed up:
root - tty1 - Sept 28 07:04
cs - pts/0 Oct 12 :1727 (my hostname)

So we assumed it was the hosting company.
 
Old 10-13-2005, 03:06 PM   #4
XavierP
Moderator
 
Registered: Nov 2002
Location: Kent, England
Distribution: Debian Testing
Posts: 19,192
Blog Entries: 4

Rep: Reputation: 475Reputation: 475Reputation: 475Reputation: 475Reputation: 475
But that hasn't actually told you who did it. really, all that says is that someone logged into your pc as root at 1727.

I'd have a search and look at what was changed at that time and find out who would need to log in as root. If they are doing this without your knowledge or consent, your files and data are insecure.

I would immediately change your root password and look into using sudo. Then again, since you don't know what they did, it may be better to just rebuild.
 
Old 10-13-2005, 06:01 PM   #5
joose
LQ Newbie
 
Registered: Oct 2005
Posts: 7

Original Poster
Rep: Reputation: 0
Hello,

I e-mailed my server provider and they said that for some reason it was still logged on from when they rebooted it.
 
Old 10-13-2005, 06:43 PM   #6
XavierP
Moderator
 
Registered: Nov 2002
Location: Kent, England
Distribution: Debian Testing
Posts: 19,192
Blog Entries: 4

Rep: Reputation: 475Reputation: 475Reputation: 475Reputation: 475Reputation: 475
That is very strange indeed. Do you use a graphical login? It may be set to autologin root by default. And that is bad for security and your system.
 
Old 10-13-2005, 07:33 PM   #7
joose
LQ Newbie
 
Registered: Oct 2005
Posts: 7

Original Poster
Rep: Reputation: 0
No SSH only
 
Old 10-14-2005, 05:35 AM   #8
nx5000
Senior Member
 
Registered: Sep 2005
Location: Out
Posts: 3,307

Rep: Reputation: 57
I agree with XavierP, very strange. And connected for 14 days...

In that case, the best (to be really sure) is a reinstall ...

bye
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Logged in as root, prompted for root password ta0kira Slackware 13 04-25-2005 01:29 AM
being logged in as root Smokey Linux - Security 6 09-06-2004 02:34 PM
Only Yast when logged in as root fb1907 Linux - Distributions 1 08-25-2004 08:14 PM
kde much slower to start when logged in as alan than logged in as root arubin Slackware 0 04-26-2004 04:27 PM
mozilla works fine when logged in as a user but crashes when logged in as root jimi Linux - General 6 04-02-2003 08:34 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 05:23 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration