[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] Howto trace hack (was: Raq550: SMTP shutting down)
- Subject: Re: [cobalt-users] Howto trace hack (was: Raq550: SMTP shutting down)
- From: Jeff Lasman <blists@xxxxxxxxxxxxx>
- Date: Sat Mar 20 10:40:01 2004
- Organization: nobaloney.net
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
On Thursday 18 March 2004 03:52 pm, Crocket wrote:
> ? 3) As long as I don't find the reason , nothing will prevent them
> to do it again. What can I do to prevent this ?
While I still don't believe in leaving a compromised machine online, and
I heartily recommend a complete rebuild, whether or not you do said
rebuild, yes it could happen again.
I'd recommend setting permissions on gcc so it will only work for root.
That's a start.
Jeff
--
Jeff Lasman, nobaloney.net, P. O. Box 52672, Riverside, CA 92517 US
Professional Internet Services & Support / Consulting / Colocation
Our blists address used on lists is for list email only
Phone +1 909 324-9706, or see: "http://www.nobaloney.net/contactus.html";