From owner-freebsd-questions Thu Aug 24 5:33:58 2000 Delivered-To: freebsd-questions@freebsd.org Received: from malkav.snowmoon.com (ip-208-20-126-237.cdcsd.k12.ny.us [208.20.126.237]) by hub.freebsd.org (Postfix) with SMTP id 5747837B424 for ; Thu, 24 Aug 2000 05:33:56 -0700 (PDT) Received: (qmail 40454 invoked from network); 24 Aug 2000 12:33:55 -0000 Received: from localhost.snowmoon.com (HELO localhost) (127.0.0.1) by localhost.snowmoon.com with SMTP; 24 Aug 2000 12:33:55 -0000 Date: Thu, 24 Aug 2000 08:33:55 -0400 (EDT) From: Jaime To: Terry Rossi Cc: freebsd-questions@freebsd.org Subject: Re: URGENT HELP PLEASE Scripts No Longer Working In-Reply-To: <001701c00dc6$6b48e940$7dbc08cf@pics.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Thu, 24 Aug 2000, Terry Rossi wrote: > $ periodic > [: not found > [: not found > [: not found > usage: basename string [suffix] > [: not found > Subject: picspc01.pics.com run output > > This is a /bin/sh script I have recomplied and made a new copy of sh but > that didn't appear to correct the problem. Any ideas on what could be wrong > here would be appreciated. Start by looking through your /etc/periodic directory. It looks like someone might have added things to it. Next up, if you had an intrusion, I'd recommend that you rc -rf /usr/src and then CVSup a new source code tree and recompile the OS. This will get out things like back doors in the login binary. This assumes, of course, that you don't have any highly customized source code. :) Then I'd suggest that you also look in /var/db/pkg for what you have installed, pkg_delete everything and reinstall it. Again, this follows the idea that someone might have slipped a back door into one of your binaries. Also look at /etc/inetd.conf and make sure that nothing is out of place. While you're in that file, turn off anything that isn't actively supported. For example, if you don't give your users shell access, turn off talk. Jaime To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message