[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] weird shell errors

Hi John,
I never use an appliance like yours but if I face this kind of problem, this is what i'll do: 

1. Backup the /bin/login file;
2. Replace it with a trustable /bin/login file that i got somewhere;
3. Boot the server; if it works i'll considered this server hacked and begin the painful cleaning procedure. 

Please let us about your progress.

Hope it helps,

Roberto


At 16:56 18/02/01 -0500, you wrote:


Hello all,

I'm working with a customer's Cobalt RaQ3i, which I believe may be hacked,
but I'm just no sure.  Given the recent spate of this going on, I wouldn't
be suprised.

When I'm at the shell prompt and attempt to edit something
using pico, I get "Incomplete terminfo entry", and it will not allow me to
edit the file.  Vi only fills the screen with a bunch of unintelligible
characters.

When I'm at the shell prompt and attempt to do a directory reading piped
to less, I get "WARNING: terminal is not fully functional", which I
imagine must be related.

I compared the contents of the terminfo directory to another *presumed*
good box, and they both look the same.

Any ideas or suggestions would be appreciated.  That is, if I this gets
posted in the next 6 days, as it seems any post I send to this list seems
to take that long to show up, whereas I've noticed that sometimes others
are able to post and reply almost immediately.  Hrphf.


Regards,

- John




_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users