Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 8 Dec 2003 11:01:44 +0000
From:      Jez Hancock <jez.hancock@munk.nu>
To:        freebsd-security@freebsd.org
Subject:   Re: possible compromise or just misreading logs
Message-ID:  <20031208110144.GA92321@users.munk.nu>
In-Reply-To: <000b01c3bce5$a411f9c0$65ffa8c0@EOS>
References:  <000b01c3bce5$a411f9c0$65ffa8c0@EOS>

next in thread | previous in thread | raw e-mail | index | archive | help

On Sun, Dec 07, 2003 at 09:14:56AM -0800, Craig Riter wrote:
> It was the only file listed and I didn't remember changing anything on my pc
> having to do with the screensaver and can't even remember for sure if I was
> on my computer at that time.
Try:

ls -l /var/db/pkg

and see if any ports were modified at that time.  

You can also use 'last' to check if you were logged in around that time.

-- 
Jez Hancock
 - System Administrator / PHP Developer

http://munk.nu/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20031208110144.GA92321>