I knew you didn't forget me...I'm not quite that paranoid. :)
onward....
Welp, I looked into all the config files for bash and didn't find anything
unseemly. I DID, however, find something rather interesting in my
searching.
I found a directory : /.l
Is this something that is supposed to be there? Or is it something that
someone was able to put there due to my infantile admin skills?
Again, RH6 is my distro....
About what's in the directory.
I found that it has some source code, and a Makefile, and some compiled
items. My code reading skills are, unfortunately, at about a 1st grade
level, so I'm not too sure about what the program does, but it has something
to do with my IP address.
I realize that this is probably a VERY bad description, and I appologize. I
just wanted to get it out to you guys for opinions ASAP because I have a
feeling its rather sinister.
If anyone wants to see the code...let me know...
Thanks for your input.
----- Original Message -----
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>;
<[EMAIL PROTECTED]>
Sent: Friday, May 19, 2000 1:02 AM
Subject: Re: Can't log in
>
>
> On Thu, 18 May 2000, David Hearne wrote:
>
> > OK, I'm sending this again because I think it got lost last time :). I
> > really would love some help figuring this out...as it is obviously WAY
> > beyond anything that I can do on my own (otherwise it might be fixed by
> now
> > :P)
> >
> > Thanks in advance
> >
> > Dave
>
> I haven't forgotten you, I just can't work out how you managed to
> disable telnet login with exactly those symptoms, without similarly
> disabling local console logins. Unless maybe you (or a program claiming
> to act on your orders, inserted into the shell initialization something
> like this:
>
> if (tty |grep pts); then
> echo "Login incorrect"
> logout
> fi
>
> That would about do it. You would still get "Connection closed by
> foreign host." after, which you didn't report IIRC, but that's just
> telnet, so maybe you didn't bother.
>
> Might be worth a check of your shell initialization files. The man page
> for the shell should have a blurb about them near the end. I think
> RedHat also sources /etc/bashrc in the skeleton individual
> ~/.bash_profile and ~/.bashrc files, so if I wanted to booby-trap a
> RedHat system I would think about putting it there.
>
> Lawson
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to [EMAIL PROTECTED]
Please read the FAQ at http://www.linux-learn.org/faqs
