[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] RE: crontab error



Did you consider the fact that you might been hacked? crond is usualy also trojanned.

At 08:53 21-4-2001 -0400, you wrote:
>I've seen a couple of references in the archives to people having this
>problem but don't see that it was ever solved.

>In making changes to crontab I have somehow managed to begin getting the
>following message emailed to me each time a cron job runs:

>>From root  Sat Apr 21 01:01:01 2001
>>Date: Sat, 21 Apr 2001 01:01:01 -0400
>>From: root (Cron Daemon)
>>To: root
>>Subject: Cron <root@www> root run-parts /etc/cron.hourly
>>X-Cron-Env: <SHELL=/bin/bash>
>>X-Cron-Env: <PATH=/sbin:/bin:/usr/sbin:/usr/bin>
>>X-Cron-Env: <MAILTO=root>
>>X-Cron-Env: <HOME=/>
>>X-Cron-Env: <LOGNAME=root>

>>/bin/bash: root: command not found

>I have now taken "root" out of each of the lines in the crontab file and
>it
>seems to be working but I wonder if I've caused myself some potential
>problems?

OK, so it's worse than I thought...  It appears that I have two crontabs
running.  Last night my backup and webalizer both ran twice.

I see only one instance of crond when I do ps -aux.  The list of jobs shows
up only once when I do crontab -l

Ideas much appreciated