I thought my Qube 2 was root kitted because ps -A
didn't work right and the .bash-history file was not
working properly.
> ps -A
warning: `-' deprecated; use `ps A', not `ps -A'
unrecognized option or trailing garbage
usage: ps -acehjlnrsSuvwx{t<tty>|#|O[-]u[-]U..} \
--sort:[-]key1,[-]key2,...
--help gives you this message
--version prints version information
Whenever I look at the .bash-history for root when
logged in as root it is always 0 length. I can see
when logged in as admin that it is some 27 bytes,
but as soon as I su it becomes 0 again.
So I restored from a freshly downloaded image that
was placed on CD. Immediately after restore I have
the same behavior. No ps -A and no .bash-history.
Is this normal behavior for a Qube 2?
jay
---------------------------------------------------
DuoMark International, Inc.
6523 Colgate Avenue, Suite 325
Los Angeles, CA 90048-4410 / USA
Voice: +1 323 381-0002
FAX: +1 323 549 0172
Email: [EMAIL PROTECTED]
WWW: http://www.duomark.com/
_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security
