From owner-freebsd-security@FreeBSD.ORG  Fri May  2 12:40:21 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A228E37B401
	for <freebsd-security@freebsd.org>;
	Fri,  2 May 2003 12:40:21 -0700 (PDT)
Received: from gigatrex.com (graceland.gigatrex.com [209.10.113.211])
	by mx1.FreeBSD.org (Postfix) with SMTP id 0EBA043F85
	for <freebsd-security@freebsd.org>;
	Fri,  2 May 2003 12:40:20 -0700 (PDT)
	(envelope-from piechota@argolis.org)
Received: (qmail 13170 invoked from network); 2 May 2003 19:40:48 -0000
Received: from unknown (HELO cithaeron.argolis.org) (138.88.116.73)
  by graceland.gigatrex.com with SMTP; 2 May 2003 19:40:48 -0000
Received: from cithaeron.argolis.org (localhost [127.0.0.1])
	h42JffiN035954;	Fri, 2 May 2003 15:41:41 -0400 (EDT)
	(envelope-from piechota@argolis.org)
Received: from localhost (piechota@localhost)h42JffET035951;
	Fri, 2 May 2003 15:41:41 -0400 (EDT)
X-Authentication-Warning: cithaeron.argolis.org: piechota owned process doing
	-bs
Date: Fri, 2 May 2003 15:41:41 -0400 (EDT)
From: Matt Piechota <piechota@argolis.org>
To: mario <mario@schmut.com>
In-Reply-To: <4121.192.168.23.97.1051902878.squirrel@webmail.schmut.com>
Message-ID: <20030502153932.I30572@cithaeron.argolis.org>
References: <4121.192.168.23.97.1051902878.squirrel@webmail.schmut.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
cc: freebsd-security@freebsd.org
Subject: Re: Did i get hacked?
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 02 May 2003 19:40:21 -0000

On Fri, 2 May 2003, mario wrote:

> So if this was a hardware failure (harddrive), then any kernel panic
> statements probably would not make it to the harddrive. So it would be
> hard to tell. My question is, what if i got hacked? Would there be anyway
> to find out despite me being totally unprepared for this?
>
> That question really messes with my head.
> Any pointer and/or clue stick treatments would be greatly appreciated.

Make sure there's enough space on the temp file location for the apache
log files.  I've had other os machines crash when you fill up the
root/tmp filesystems.

-- 
Matt Piechota