RE: [cobalt-users] I've been hacked

["Peter Masloch" <peter@xxxxxxxxxxx>]

Hm, you don't have a siteadmin named.
On my Raq2 it is "site-admin:x:111:myusername"
The entree for adm looks good.
Peter


>> You have to run a portscan on your server. It also is possible
>> that the intruder has created an account for himself. Check the file
>> /etc/group. Look if there is a username/groupname you don'e know of.
>
>Hey guys, on the same subject, do these (on a RAQ2) look normal.
>It's the adm that I don't recognize and wonder if it's a system 
>user.
>Anyone got any comments on these ??
>
>These were found in my /etc/group.
>...
>adm:x:4:root,adm,daemon
>...
>site-adm:x:111:
>...
>
>TIA.
>Paul.
>
>_______________________________________________
>cobalt-users mailing list
>cobalt-users@xxxxxxxxxxxxxxx
>To Subscribe or Unsubscribe, please go to:
>http://list.cobalt.com/mailman/listinfo/cobalt-users
>
>