Re: [cobalt-users] next question

[SM <nntp@xxxxxxxxx>]

Hi,
At 15:54 06-01-2002 -0800, root wrote:
>I had a new-hire working on my qube 3 last evening setting up an email 
>server, and I caught him doing something with a program called pg.  How do I 
>know if my server now has a backdoor?  What kind of security measures do you 
>all recommend for the qube?  I looked up pg, it's an sql client, and I found 
>that an older version has a built in exploit that collects passwords in 
>conjunction with apache.  Should I be worried about this, or am I just being 
>too paranoid?

Did you ask the person what he/she was doing? :)  If the person had
root/admin access he/she doesn't even have to bother putting in a backdoor
to access your system.

If you are serious about security, keep an eye on the logs and on what
processes the box is running.  The best security measure is to learn about
how the box works.

Regards,
-sm