[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] RE: [Qube2]Wierd Login prompt (I have no name!@machine) [FIXED]
- Subject: Re: [cobalt-users] RE: [Qube2]Wierd Login prompt (I have no name!@machine) [FIXED]
- From: shimi <shimi@xxxxxxxxxxxxxxxx>
- Date: Tue Apr 17 22:25:02 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
On Wed, 18 Apr 2001, Colin J. Raven wrote:
<snip>
> Here's the wierd (weird?) thing. The box in question has *no* internet
> access whatsoever. It's an intranet mail and specification-document
> server only and in a building without an internet connection (there's a
> deliberate reason for this, but it's a long story). One other user has
> access to the shell (he adds users and takes care of some basic
> housekeeping) He doesn't know enough to mess with /etc/passwd perms. The
> likelihood of the box being compromised therefore, is as close to zero
> as you can get in practical terms. I checked the local admin's
> .bash_history and he hadn't been anywhere near the file. Root's
> .bash_history also showed no activity around the file. Earlier in the
> day I rebooted the machine from a command prompt, and after the reboot
> the command prompt was munged up. I cannot understand how rebooting
> could change the perms on that file, but sure as hell, the odd behaviour
> showed up immediately following reboot.
>
> Anyway, it's fixed. Thanks shimi!!!!!
> Regards,
> -Colin
> --
> Colin J. Raven
>
Ok listen.
Once you login, your username is set in an enviroment variable (use the
"set" commands with no parms to see...).
That means that if you were logged in, and then the perms changed, and u
didn't log out before rebooting, that the problem might have been
earlier...
BUT, if you logged in, it was ok, logged out, rebooted, went into signle
user (if I understood you correctly) - and then rebooted again and the
problem started, I guess it's something in the init script of single
user initlevel.
If however that wasn't the situation, and you were logged before and can't
be sure when it started exactly.. look for script kiddies on your LAN, I
guess. :)
b. regards,
- shimi