Re: [cobalt-users] httpd not working on Raq4

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Roger Lewis wrote:

> My co-locator, rackshack.net, says this resulted from my force install of
> the Cobalt Apache patch rpms on July 10.  It doesn't seem logical to me
> since everything has been working for 5 days.

What file(s) did you patch?  Just get them off a working RaQ4 (I can
supply them if necessary) and write them over yours.

You may have been hacked.  Have you run chkrootkit (see
"http://www.chkrootkit.org/";).

> Does anyone have any idea how to get this machine back up short of a
> restore.

If you've been hacked then the easiest/quickest way may be to restore,
but you can probably do a cmu save first, and save the resulting
directory structure in a tarball.

But I'd try restoring the files you patched first.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
Linux and Cobalt/Sun/RaQ Consulting
nobaloney.net, P. O. Box 52672, Riverside, CA  92517
voice: +1 909 778-9980  *  fax: +1 909 548-9484