[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Raq550 - .bash_history size is 0



On one of our Raq550's, we got a chkrootkit message that the Root
.bash_history file size was 0 bytes.  I think this measn that someone logged
in and deleted this file to cover their tracks.   Though I changed my
password and have searched for any problems (& found none), I want to know
if there is a way to see what was done.  Has anyone found anything out of
the ordinary that I should look for?

John