Tracing symlink from/tmp
I have what seems to be a dangerous /tmp file.
Have a look and tell me what you think:
<snip>
title="harris@svn:/tmp$ crontab -l
* * * * * /bin/echo "Hello World, I'm working" >> /tmp/cronlog.harris.txt
harris@svn:/tmp$ sudo -s
root@svn:/tmp# crontab -l
* * * * * /bin/echo "Hello World, I'm working" >> /tmp/cronlog.txt
root@svn:/tmp# ll">
Looks pretty suspicious to me.
What does everyone else think?
Regards
PS:My /tmp is noexec.
Last edited by netmanwolf; 05-05-2007 at 12:26 AM.
|