From owner-freebsd-questions Fri Mar 15 17:56:46 1996 Return-Path: owner-questions Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id RAA18181 for questions-outgoing; Fri, 15 Mar 1996 17:56:46 -0800 (PST) Received: from riley-net170-164.uoregon.edu (riley-net170-164.uoregon.edu [128.223.170.164]) by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id RAA18176 for ; Fri, 15 Mar 1996 17:56:43 -0800 (PST) Received: (from dwhite@localhost) by riley-net170-164.uoregon.edu (8.6.12/8.6.12) id RAA07895; Fri, 15 Mar 1996 17:51:03 -0800 Date: Fri, 15 Mar 1996 17:51:02 -0800 (PST) From: Doug White Reply-To: dwhite@resnet.uoregon.edu To: "Aaron D. Gifford" cc: Richard Chang , questions@FreeBSD.org Subject: Re: Passwords In-Reply-To: <2.2.32.19960315233819.006d2e4c@infowest.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-questions@FreeBSD.org X-Loop: FreeBSD.org Precedence: bulk On Fri, 15 Mar 1996, Aaron D. Gifford wrote: > At 11:43 AM 3/15/96 -0800, you wrote: > >Hi there, > > > > We are running a site that had security breakins and the hacker > >managed to changed the root password and the edited both the /etc/passwd > >and /etc/master.passwd file and deleted pretty much everything in it. It > >seems the pwd.db and spwd.db are the original ones since apparently the > >person didn't use vipw on the DES encrypted system. I was wondering if > >there was a way to use the pwd.sb and spwd.db even if the encrypted passwd's > >in master.passwd don't match.... Thanks. > > > >Richard > > > > Hi, > > I've trashed my master.passwd file before, so I wrote me a perl script to > regenerate my master.passwd file from the spwd.db file. It has worked for > me. maybe it will work for you. Also, backups (two of them) are kept in /var/backup, and they are diff'd against the master files every night, so concievably you could reverse diff from the mail message if it got to that point. Doug White | University of Oregon Internet: dwhite@resnet.uoregon.edu | Residence Networking Assistant http://gladstone.uoregon.edu/~dwhite | Computer Science Major