On Fri, 6 Oct 2000, Ben Logan wrote:

> I was wondering if I might be possible that no-one actually gained
> access to the system, but instead I installed a (malicious) package
> that added the line.

Not likely.  It's a lot more probable that the intruder simply didn't
change any of your binaries, since he didn't have to.

> If so, how could I find the offending package?

rpm -qa --scripts | grep -C10 inetd.conf

> Most importantly, how
> can I prevent this from happening again.

Check Red Hat's errata page and install any updates (after reinstalling
your system  ;)

Since you've ordered RH 7.0, you'll probably want to install from scratch.

MSG




_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to