On Fri, 6 Oct 2000, Ben Logan wrote:
> I was wondering if I might be possible that no-one actually gained
> access to the system, but instead I installed a (malicious) package
> that added the line.
Not likely. It's a lot more probable that the intruder simply didn't
change any of your binaries, since he didn't have to.
> If so, how could I find the offending package?
rpm -qa --scripts | grep -C10 inetd.conf
> Most importantly, how
> can I prevent this from happening again.
Check Red Hat's errata page and install any updates (after reinstalling
your system ;)
Since you've ordered RH 7.0, you'll probably want to install from scratch.
MSG
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list