Re: [CentOS] crontab for nobody

2008-07-21 Thread Anne Wilson
On Monday 21 July 2008 08:49:51 Mogens Kjaer wrote: > Anne Wilson wrote: > ... > > >>-rw--- 1 root root 0 Jul 7 16:07 /var/spool/cron/nobody > > ... > > > /var/log/yum.log shows nothing between 3rd and 11th June. > > > > Jun 03 16:04:30 Updated: commoncpp2.i386 1.6.2-1.el5.rf > > Jun 11 17

Re: [CentOS] crontab for nobody

2008-07-21 Thread Mogens Kjaer
Anne Wilson wrote: ... -rw--- 1 root root 0 Jul 7 16:07 /var/spool/cron/nobody ... /var/log/yum.log shows nothing between 3rd and 11th June. Jun 03 16:04:30 Updated: commoncpp2.i386 1.6.2-1.el5.rf Jun 11 17:33:22 Updated: clamav-db.i386 0.93.1-1.el5.rf Jun 11 17:33:28 Updated: clamav

Re: [CentOS] crontab for nobody

2008-07-21 Thread Anne Wilson
On Sunday 20 July 2008 22:31:22 John Horne wrote: > On Sun, 2008-07-20 at 22:04 +0100, Anne Wilson wrote: > > On Sunday 20 July 2008 21:23:52 Stephen Harris wrote: > > > What does > > > find /var/spool/cron -type f ! -size 0 > > > show? > > > > Does that mean 'not = size 0'? > > Yes. > > > I can'

Re: [CentOS] crontab for nobody

2008-07-21 Thread Anne Wilson
On Sunday 20 July 2008 22:32:49 John Horne wrote: > On Sun, 2008-07-20 at 17:28 -0400, Stephen Harris wrote: > > On Sun, Jul 20, 2008 at 10:04:00PM +0100, Anne Wilson wrote: > > > I can't think of anything that explains this. I have a 6-month-old > > > CentOS 5.2 install, with nothing out of the o

Re: [CentOS] crontab for nobody

2008-07-20 Thread Stephen Harris
On Sun, Jul 20, 2008 at 10:32:49PM +0100, John Horne wrote: > On Sun, 2008-07-20 at 17:28 -0400, Stephen Harris wrote: > > On Sun, Jul 20, 2008 at 10:04:00PM +0100, Anne Wilson wrote: > > > I can't think of anything that explains this. I have a 6-month-old > > > CentOS 5.2 > > I doubt it; 5.2 h

Re: [CentOS] crontab for nobody

2008-07-20 Thread John Horne
On Sun, 2008-07-20 at 17:28 -0400, Stephen Harris wrote: > On Sun, Jul 20, 2008 at 10:04:00PM +0100, Anne Wilson wrote: > > I can't think of anything that explains this. I have a 6-month-old CentOS > > 5.2 > > install, with nothing out of the ordinary, as far as I can recall. > > I doubt it; 5.

Re: [CentOS] crontab for nobody

2008-07-20 Thread John Horne
On Sun, 2008-07-20 at 22:04 +0100, Anne Wilson wrote: > On Sunday 20 July 2008 21:23:52 Stephen Harris wrote: > > > > What does > > find /var/spool/cron -type f ! -size 0 > > show? > > > Does that mean 'not = size 0'? > Yes. > > I can't think of anything that explains this. I have a 6-month-o

Re: [CentOS] crontab for nobody

2008-07-20 Thread Stephen Harris
On Sun, Jul 20, 2008 at 10:04:00PM +0100, Anne Wilson wrote: > On Sunday 20 July 2008 21:23:52 Stephen Harris wrote: > > What does > > find /var/spool/cron -type f ! -size 0 > > show? > > > Does that mean 'not = size 0'? "not (size = 0)", but yeah. > /var/spool/cron/anne > /var/spool/cron/root

Re: [CentOS] crontab for nobody

2008-07-20 Thread Anne Wilson
On Sunday 20 July 2008 21:23:52 Stephen Harris wrote: > On Sun, Jul 20, 2008 at 07:18:05PM +0100, Anne Wilson wrote: > > On Sunday 20 July 2008 17:44:23 Bill Campbell wrote: > > > Does anything show up with ``find /var/spool/cron -type f''? > > > > /var/spool/cron/apache > > /var/spool/cron/rpc > >

Re: [CentOS] crontab for nobody

2008-07-20 Thread Stephen Harris
On Sun, Jul 20, 2008 at 07:18:05PM +0100, Anne Wilson wrote: > On Sunday 20 July 2008 17:44:23 Bill Campbell wrote: > > Does anything show up with ``find /var/spool/cron -type f''? > > > /var/spool/cron/apache > /var/spool/cron/rpc [43 more lines deleted] Wow, looks like somebody or something has

Re: [CentOS] crontab for nobody

2008-07-20 Thread Anne Wilson
On Sunday 20 July 2008 20:03:45 John Horne wrote: > On Sun, 2008-07-20 at 19:20 +0100, Anne Wilson wrote: > > On Sunday 20 July 2008 18:04:10 Chris Clonch wrote: > > > On Sunday 20 July 2008 11:50:21 Anne Wilson wrote: > > > > On Sunday 20 July 2008 16:24:31 Robert - elists wrote: > > > > > > > Wha

Re: [CentOS] crontab for nobody

2008-07-20 Thread John Horne
On Sun, 2008-07-20 at 19:20 +0100, Anne Wilson wrote: > On Sunday 20 July 2008 18:04:10 Chris Clonch wrote: > > On Sunday 20 July 2008 11:50:21 Anne Wilson wrote: > > > On Sunday 20 July 2008 16:24:31 Robert - elists wrote: > > > > > > What does 'crontab -u nobody -l' show ? > > > > > > > > > > Not

Re: [CentOS] crontab for nobody

2008-07-20 Thread Anne Wilson
On Sunday 20 July 2008 18:04:10 Chris Clonch wrote: > On Sunday 20 July 2008 11:50:21 Anne Wilson wrote: > > On Sunday 20 July 2008 16:24:31 Robert - elists wrote: > > > > > What does 'crontab -u nobody -l' show ? > > > > > > > > Nothing at all - it just returns to the prompt. > > > > > > > > Anne

Re: [CentOS] crontab for nobody

2008-07-20 Thread Anne Wilson
On Sunday 20 July 2008 17:44:23 Bill Campbell wrote: > On Sun, Jul 20, 2008, Anne Wilson wrote: > >On Sunday 20 July 2008 16:24:31 Robert - elists wrote: > >> > > What does 'crontab -u nobody -l' show ? > >> > > >> > Nothing at all - it just returns to the prompt. > >> > > >> > Anne > >> > >> Anne,

Re: [CentOS] crontab for nobody

2008-07-20 Thread Chris Clonch
On Sunday 20 July 2008 11:50:21 Anne Wilson wrote: > On Sunday 20 July 2008 16:24:31 Robert - elists wrote: > > > > What does 'crontab -u nobody -l' show ? > > > > > > Nothing at all - it just returns to the prompt. > > > > > > Anne > > > > Anne, > > > > It should say "no crontab for nobody" or sho

Re: [CentOS] crontab for nobody

2008-07-20 Thread Bill Campbell
On Sun, Jul 20, 2008, Anne Wilson wrote: >On Sunday 20 July 2008 16:24:31 Robert - elists wrote: >> > > What does 'crontab -u nobody -l' show ? >> > >> > Nothing at all - it just returns to the prompt. >> > >> > Anne >> >> Anne, >> >> It should say "no crontab for nobody" or show the crontab >> >>

Re: [CentOS] crontab for nobody

2008-07-20 Thread Anne Wilson
On Sunday 20 July 2008 16:24:31 Robert - elists wrote: > > > What does 'crontab -u nobody -l' show ? > > > > Nothing at all - it just returns to the prompt. > > > > Anne > > Anne, > > It should say "no crontab for nobody" or show the crontab > > Eh? > It doesn't do either Anne signature.asc Des

RE: [CentOS] crontab for nobody

2008-07-20 Thread Robert - elists
> > What does 'crontab -u nobody -l' show ? > > Nothing at all - it just returns to the prompt. > > Anne Anne, It should say "no crontab for nobody" or show the crontab Eh? - rh ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mai

Re: [CentOS] crontab for nobody

2008-07-20 Thread Anne Wilson
On Sunday 20 July 2008 14:05:45 Jim Perrin wrote: > On Sun, Jul 20, 2008 at 4:55 AM, Anne Wilson <[EMAIL PROTECTED]> wrote: > > Every day I see this in chkrootkit's log - > > > > Checking `crontab'... Warning: crontab for nobody found, possible > > Lupper.Worm... not infected > > > > I know I met

Re: [CentOS] crontab for nobody

2008-07-20 Thread Jim Perrin
On Sun, Jul 20, 2008 at 4:55 AM, Anne Wilson <[EMAIL PROTECTED]> wrote: > Every day I see this in chkrootkit's log - > > Checking `crontab'... Warning: crontab for nobody found, possible > Lupper.Worm... not infected > > I know I met this once before, but I can't remember whether there is any cure