RE: [cobalt-users] Can't reboot

["Andy Brown" <andy.brown@xxxxxxxxxxxxx>]

<snip>
> Hi there - Can anyone help
> 
> 
> I logged on this morning with SSH
> and then issued a  'su -' command
> 
> and lo and behold..
> 
> I got dropped into root immediately without password.
> 
> Hmm   let's reboot
> 
> I go to the GUI and try to reboot -  Nothing
</snip>

Looks highly like somebody has compromised the root account on your machine somehow, time to check the lastlog (last -10) and see whos been logging in, and as Steve suggests use chkrootkit and see what it finds (btw, new version of it out with more checks i recently noticed)

If not breached, then looks like part of the GUI/front-panel has gone a bit strange and removed the password. When a RaQ is first deployed its root password is blank (if memory serves me correctly).

Regards,

Andy
andy@xxxxxxxxxxxxxxx
http://www.raqpak.com/ <-- Raq/Qube unofficial PKGs and support advice