Re: [cobalt-users] Chkrootkit anomalie

[Jeroen Wunnink <jeroen@xxxxxxxxxxxxxx>]

Depends


Have you actually ever logged in as root ?, and IF you did that, did you 
use the bash shell ?

That file simply holds a history of entered commands by root.., hackers 
tend to erase the file in order to mask their actions..

At 06:55 AM 4/24/2003 -0500, you wrote:
> The daily chkroot kit gave this warning:
>
> Searching for anomalies in shell history files... Warning: 
> `//root/.bash_history' file size is zero
> nothing found
>
> What should I be concerned about?
>
>
> John
>
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users



Met vriendelijke groet,

Jeroen Wunnink,
systeembeheer@xxxxxxxxxxxxxx

telefoon:+31 (035) 6285455              Postbus 1332
fax: +31 (035) 6838242                  1200 BH Hilversum

http://www.easyhosting.nl