Boy. I'm willing to be that there might be some hacking going around... Mike
-------------------------------------------------------- Mike Pelley "Non illegitimati carborundum" Owner & "Misc. Rambler" of Pelleys.com [EMAIL PROTECTED] - www.pelleys.com -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Rupendra Singh Sent: Sunday, February 24, 2002 11:13 AM To: [EMAIL PROTECTED] Subject: Re: strange error > On 13:28 23 Feb 2002, Rupendra Singh <[EMAIL PROTECTED]> wrote: > | thanks that solved the problem > | permissions were: > | -rwx------ 1 root root 46224 Aug 28 13:16 > > Good. > > | but how did it happen i never entered the /lib dirctory as root > > A mystery. But this is what you must find out so that you can prevent > it happening again. > > | bye the way i am running squirrelmail as webmail and i have > observed | that some of my squirrelmail users became owners of some > randomly | choosen files in /bin and /usr/bin. i cannot doubt these > users and | they do not have shell access. > > I would guess some bug or hole in the webmail side of things. Such an > app often runs with root privileges for at least part of its operation > (in order to become whichever user is access the > email) > and as such has the power to do arbitrary things anywhere on the > system by accident if badly coded. > > Which files were getting changed? ls df free netstat ifconfig _______________________________________________ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list _______________________________________________ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
