From owner-freebsd-questions Mon Feb 16 13:21:24 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id NAA01239 for freebsd-questions-outgoing; Mon, 16 Feb 1998 13:21:24 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from awfulhak.org (awfulhak.demon.co.uk [158.152.17.1]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id NAA00890 for ; Mon, 16 Feb 1998 13:20:48 -0800 (PST) (envelope-from brian@Awfulhak.org) Received: from gate.lan.awfulhak.org (localhost [127.0.0.1]) by awfulhak.org (8.8.7/8.8.7) with ESMTP id VAA03977; Mon, 16 Feb 1998 21:18:11 GMT (envelope-from brian@gate.lan.awfulhak.org) Message-Id: <199802162118.VAA03977@awfulhak.org> X-Mailer: exmh version 2.0.1 12/23/97 To: Doug White cc: Dave Hummel , questions@FreeBSD.ORG Subject: Re: hacked? :/etc/group In-reply-to: Your message of "Mon, 16 Feb 1998 10:51:31 PST." Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Mon, 16 Feb 1998 21:18:11 +0000 From: Brian Somers Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > On Fri, 13 Feb 1998, Dave Hummel wrote: > > > Much to my dismay I found the following entry in /etc/group today: > > :*:: > > > > I assuming I was hacked. Any other possible explanation? > > That's the NIS magic word. Are you running NIS? Na, the NIS magic is ``+:::''. > Doug White | University of Oregon > Internet: dwhite@resnet.uoregon.edu | Residence Networking Assistant > http://gladstone.uoregon.edu/~dwhite | Computer Science Major -- Brian , , Don't _EVER_ lose your sense of humour.... To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message