[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] Been Hacked - WAS: Bad Data in /var/run/utmp
- Subject: Re: [cobalt-users] Been Hacked - WAS: Bad Data in /var/run/utmp
- From: flash22@xxxxxxx
- Date: Tue Feb 13 00:40:57 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
On Tue, 13 Feb 2001, Craig Napier wrote:
> >When doing a ps-aux, is everything supposed to be listed by PID on RaQ2's?
> >Thanks,
> >Charlie
> >
> >>ps aux sorts first by username, second by PID...
>
> That may be true for an RaQ2 or systems prior to the AMD based systems, but
> not for the RaQ3/4's.. PS will sort (by default) by PID first on RaQ3/4's,
> "NOT" by UserID...
Ahh..so it is, my debian machine has the newer behavior too, should have
tried that...hmm, so much for POSIX compatability -/
That's one tip (sure way of telling) if you've been
> exploited by these recent tool-kits..
given that almost all of the kits seem to replace ps, a list of md5sums &
sizes would seem appropriate...simple certain check...Cobalt?
gsh