Shutting down my computer from KDE doesn't work - have I been compromised?
I'm running Suse 9.2 Professional and using KDE. I'm behind two firewalls, the outer one is hardware-based, the inner one running PF, Snort and Squid on OpenBSD 3.4. When trying to log out of the computer and shut down, I click on the Suse menu button and click Logout. Then, I click the button to shut down the system. This used to work fine. Lately, I've had to start doing it two times to get the system to actually shut down. Now it seems to stay up more often than it shuts down, and after the first time, I can't even get to the system shutdown button anymore. When that happens, I've been using the shutdown command in the shell to bring the system down. I should note that I have had some situations where my root partition hit 100% full, but I think this shutdown failure may have started happening before root was filled up. Hey, I just started running MythTV, and tv shows take up a lot of disk space! :-) It sounds like my system may have been compromised, or am I jumping to conclusions? If I have been compromised, does anybody know which exploit this is likely to be, or have any recovery advice? Thanks in advance, Rodney
On Sun, Apr 24, 2005 at 07:31:00AM -0400, Rodney Ricks wrote:
I'm running Suse 9.2 Professional and using KDE.
I'm behind two firewalls, the outer one is hardware-based, the inner one running PF, Snort and Squid on OpenBSD 3.4.
Is SUSE updated and the firewall it has running too?
When trying to log out of the computer and shut down, I click on the Suse menu button and click Logout. Then, I click the button to shut down the system.
This used to work fine. Lately, I've had to start doing it two times to get the system to actually shut down.
Now it seems to stay up more often than it shuts down, and after the first time, I can't even get to the system shutdown button anymore.
When that happens, I've been using the shutdown command in the shell to bring the system down.
I should note that I have had some situations where my root partition hit 100% full, but I think this shutdown failure may have started happening before root was filled up. Hey, I just started running MythTV, and tv shows take up a lot of disk space! :-)
It sounds like my system may have been compromised, or am I jumping to conclusions?
My first guess, you're jumping on a conclusion. Unless of course those firewalls have exploits that were never updated, and you haven't updated SUSE.
If I have been compromised, does anybody know which exploit this is likely to be, or have any recovery advice?
Thanks in advance, Rodney
-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here
On Sunday 24 April 2005 03:31 am, Rodney Ricks wrote:
When trying to log out of the computer and shut down, I click on the Suse menu button and click Logout. Then, I click the button to shut down the system.
This used to work fine. Lately, I've had to start doing it two times to get the system to actually shut down.
There is no reason to think you are compromised. More likely the mythbackend is refusing to shut down. After you ask it to shutdown, immediatly switch to console (Cltrl-Alt-F10) and watch whats going on. -- _____________________________________ John Andersen
participants (3)
-
Allen -
John Andersen -
Rodney Ricks