Date: Mon, 29 May 2000 22:04:12 -0500 (CDT) From: BWS - Offwhite <brennan@offwhite.net> To: EmailWeb@aol.com Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Users can't loggin now! Message-ID: <Pine.BSF.4.21.0005292157210.93091-100000@home.offwhite.net> In-Reply-To: <dd.4f3196b.26643f6f@aol.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Perhaps you were hacked, but also consider that you could have caused this problem, or a hardware failure could be the cause. You could have deleted a line in fstab by accident or perhaps messed up the devices in some way. Mistakes of all kinds happen to everyone. If things are really hosed, it is probably best to back it up and try to put the server back together from past backups. One way to determine how bad it is would be to boot into single user mode and have a look around. Once you are in, you will need to mount the drives... > fsck -p > mount -u / > mount -a -t ufs > swapon -a Once you have a good look around, try to find evidence of a compromise. If you can get the system working to a decent point, it would be best to do a rebuild of the world to be sure all key binaries are solid. Do the rebuild after a fresh cvs sync. But if you are worried about the security of the machine, simply do a reinstall and go off backups. Brennan Stehling - web developer and sys admin projects: www.greasydaemon.com | www.onmilwaukee.com | www.sncalumni.com Microsoft: Will you get a macro virus today? http://www.greasydaemon.com/noms/ <- Why avoid MS? On Mon, 29 May 2000 EmailWeb@aol.com wrote: > Dear FreeBSD, > My FreeBSD box was hacked cause of a vunerbailty in qmail and I can't > login remotly or at the console anymore > Only root console logins are possible > It says can't find root directory > > What directoryu should I chmod or what to fix the problem > -Sean > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0005292157210.93091-100000>