From owner-freebsd-security Wed Jul 25 7:28:36 2001 Delivered-To: freebsd-security@freebsd.org Received: from pm125.knurow.sdi.tpnet.pl (pm125.knurow.sdi.tpnet.pl [213.76.190.125]) by hub.freebsd.org (Postfix) with ESMTP id 5016637B853 for ; Wed, 25 Jul 2001 07:25:38 -0700 (PDT) (envelope-from doc@lublin.t1.pl) Received: (from doc@localhost) by pm125.knurow.sdi.tpnet.pl (8.11.4/8.11.3) id f6PEPQq01760 for security@freebsd.org; Wed, 25 Jul 2001 16:25:26 +0200 (CEST) (envelope-from doc@lublin.t1.pl) Date: Wed, 25 Jul 2001 16:25:26 +0200 From: =?iso-8859-2?Q?Micha=B3_Pasternak?= To: security@freebsd.org Subject: Re: Security Check Diffs Question Message-ID: <20010725162525.A1735@lublin.t1.pl> Reply-To: =?iso-8859-2?Q?Micha=B3_Pasternak?= References: <200107241632.LAA05639@chrome.jdl.com> <20010724134421.I44940-100000@mail.wlcg.com> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-2 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20010724134421.I44940-100000@mail.wlcg.com>; from rsimmons@wlcg.com on Tue, Jul 24, 2001 at 01:47:58PM -0400 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > > What compromised of my system just took place? Well, I'm reading nth post in this thread .. and I have just few questions: What's the problem? We know, that someone compromised your system's security, for sure. Why don't you download system sources and rebuild everything? (*including* ports)? Or, back up your data and reinstall everything. You'll never know, what rootkits and trojans hacker could install. For example, I once saw situation, where hacked FreeBSD just restarted /or halted/ without any causes... except chmod 777 on /dev/mem and /dev/kmem. If the hacker is good, recompiling src and ports and starting with bare /etc *won't* help. -- [ Michal Pasternak doc@lublin.t1.pl +48606570000 ] [ sklepy internetowe, bazy danych, programy na zamówienie ] [ . .. ..- .- . .. http://lublin.t1.pl . .-. .--.. . . .- ] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message