Hi Lawrence,
> We found the same hack in a RAQ3 in February, along with a few other
> problems too.
>
> See http://groups.yahoo.com/group/raq/message/8554b for details
Thanks for the pointers. Yes, I also noticed the la.pid in certain places,
but the inetd.conf on the RaQ4 had not been tampered with. That's usually the
first place where I look.
I'm not sure about the rc.sysinit. Might as well be that I overlooked the
cronlogd part of this beast.
--
Mit freundlichen Grüßen / Best regards
Michael Stauber
_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security
