openSUSE PPC

Download

ppc@lists.opensuse.org

June 2004

1 participants
2 discussions

am I hacked ?
by Damir Buskulic 16 Sep '08

16 Sep '08

Hi, I got some problems (disk access denied, bus errors,...) that led me to go into single user mode and fsck my partitions. I noticed then that there were some directories created in the tmp directory, called "dev" and "etc", and one file in the / directory called "success" with 0 length. At reboot, these files disapeared. Does anybody know if this could be a sign of a hacked computer ? I mean could someone have installed a rootkit or some such ? I'm not paranoid but this indeed seems strange. Cheers Damir -- ===================================================================== | Damir Buskulic | Universite de Savoie/LAPP | | | Chemin de Bellevue, B.P. 110 | | Tel : +33 (0)450091600 | F-74941 Annecy-le-Vieux Cedex | | e-mail: buskulic(a)lapp.in2p3.fr | FRANCE | ===================================================================== mailto:buskulic@lapp.in2p3.fr

1 1

Re: WELCOME to suse-ppc@suse.com
by David Bjornn 25 Jun '04

25 Jun '04

On Friday 25 June 2004 01:46, suse-ppc-help(a)suse.com wrote: > Hi! This is the ezmlm program. I'm managing the > suse-ppc(a)suse.com mailing list. > > I'm working for my owner, who can be reached > at suse-ppc-owner(a)suse.com. > > Acknowledgment: I have added the address > > dbjornn(a)cox.net > > to the suse-ppc mailing list. > > Welcome to suse-ppc(a)suse.com! > > Please save this message so that you know the address you are > subscribed under, in case you later want to unsubscribe or change your > subscription address. > > To unsubscribe, send a message to: > > <suse-ppc-unsubscribe-dbjornn=cox.net(a)suse.com> > > !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! > Please do not send test messages to the list -- it's annoying and rude. > Instead, use our test list. Send an email to > test-list-subscribe(a)suse.com > and reply to the confirmation request you will receive (just like you > did to subscribe to suse-ppc). To unsubscribe, send an email to > test-list-unsubscribe(a)suse.com > or do nothing...you'll be automatically unsubscribed within 24 hours. > !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! > > Please read the following frequently asked, frequently asked questions > before posting to the list. As with any mailing list or newsgroup, > it's usually a good idea to read the list for a few days before > posting. > > ----Some Frequently Asked, Frequently Asked Questions > > A1. suse-ppc is a mailing list for general discussions > about the SuSE PPC distribution and PPC hardware. > > Q2. What is appropriate content for the list? > A2. Support and development issues pertaining to SuSE. Note > that if your question isn't PPC specific (e.g., "How do > I allow all users to have access to the modem?") you are > are probably better off posting to one of the general > lists: suse-linux (German), suse-linux-e (English), > suse-linux-s (Spanish). > > Q3. What is not appropriate content for the list? > A3. Commercial postings of any kind, job postings, non-computer/Linux > related material. > > Q4. How can I retrieve the FAQ? > A4. Send an email to suse-ppc-faq(a)suse.com > > Q5. Can I send attachments to the list? > A5. The short answer is 'no', you can't but see the FAQ more details. > > Q6. Are there archives of the list? > A6. Yes, http://lists.suse.com/archive/suse-ppc/ > Currently, they are not searchable. > > Q7. Why do my replies go to the original poster and not the list? > A7. There is a more complete answer in FAQ, but the short answer > is that it's better this way. Trust us on this one, please. > > Q8. Can I get the list in digest form? > A8. Not from us. There's a much more complete discussion about > this in the FAQ as well. > > Q9. How do I pause deliveries from the list while I'm on vacation? > A9. You unsubscribe before you leave and resubscribe when you return. > > Q10. How do I contact a human regarding a problem I'm having with > the list? > A10. Send an email to suse-ppc-owner(a)suse.com > > --- Administrative commands for the suse-ppc list --- > > I can handle administrative requests automatically. Please > do not send them to the list address! Instead, send > your message to the correct command address: > > For help and a description of available commands, send a message to: > <suse-ppc-help(a)suse.com> > > To subscribe to the list, send a message to: > <suse-ppc-subscribe(a)suse.com> > > To remove your address from the list, just send a message to > the address in the ``List-Unsubscribe'' header of any list > message. If you haven't changed addresses since subscribing, > you can also send a message to: > <suse-ppc-unsubscribe(a)suse.com> > > For addition or removal of addresses, I'll send a confirmation > message to that address. When you receive it, simply reply to it > to complete the transaction. > > If you need to get in touch with the human owner of this list, > please send a message to: > > <suse-ppc-owner(a)suse.com> > > Please include a FORWARDED list message with ALL HEADERS intact > to make it easier to help you. > > --- Enclosed is a copy of the request I received. > > Return-Path: <dbjornn(a)cox.net> > Received: (qmail 9968 invoked from network); 25 Jun 2004 08:46:02 -0000 > Received: from unknown (HELO hermes.suse.de) (195.135.221.8) > by 0 with SMTP; 25 Jun 2004 08:46:02 -0000 > Received: from scanhost.suse.de (scanhost.suse.de [149.44.160.36]) > by hermes.suse.de (Postfix) with ESMTP id 037941554C > for > <suse-ppc-sc.1088151931.ldobagaaeomohcogmhag-dbjornn=cox.net(a)lists.suse.com >>; Fri, 25 Jun 2004 10:46:02 +0200 (CEST) Received: from hermes.suse.de > ([10.0.0.1]) > by scanhost.suse.de (scanhost [149.44.160.36]) (amavisd-new, port 10025) > with ESMTP id 14095-02 > for > <suse-ppc-sc.1088151931.ldobagaaeomohcogmhag-dbjornn=cox.net(a)lists.suse.com >>; Fri, 25 Jun 2004 10:45:58 +0200 (CEST) > Received: from Cantor.suse.de (cantor.suse.de [195.135.220.2]) > (using TLSv1 with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits)) > (No client certificate requested) > by hermes.suse.de (Postfix) with ESMTP id 9687615A36 > for > <suse-ppc-sc.1088151931.ldobagaaeomohcogmhag-dbjornn=cox.net(a)suse.com>; > Fri, 25 Jun 2004 10:45:58 +0200 (CEST) Received: from fed1rmmtao11.cox.net > (fed1rmmtao11.cox.net [68.230.241.28]) by Cantor.suse.de (Postfix) with > ESMTP id E12477B6E56 > for > <suse-ppc-sc.1088151931.ldobagaaeomohcogmhag-dbjornn=cox.net(a)suse.com>; > Fri, 25 Jun 2004 10:45:57 +0200 (CEST) Received: from [192.168.1.15] > (really [68.99.207.43]) > by fed1rmmtao11.cox.net > (InterMail vM.6.01.03.02 201-2131-111-104-20040324) with ESMTP > id <20040625084556.QRSK4676.fed1rmmtao11.cox.net(a)[192.168.1.15]> > for > <suse-ppc-sc.1088151931.ldobagaaeomohcogmhag-dbjornn=cox.net(a)suse.com>; > Fri, 25 Jun 2004 04:45:56 -0400 > From: David Bjornn <dbjornn(a)cox.net> > To: suse-ppc-sc.1088151931.ldobagaaeomohcogmhag-dbjornn=cox.net(a)suse.com > Subject: Re: confirm subscribe to suse-ppc(a)suse.com > Date: Fri, 25 Jun 2004 01:46:52 -0700 > User-Agent: KMail/1.6.2 > References: <1088151931.10820.ezmlm(a)suse.com> > In-Reply-To: <1088151931.10820.ezmlm(a)suse.com> > MIME-Version: 1.0 > Content-Disposition: inline > Content-Type: text/plain; > charset="iso-8859-1" > Content-Transfer-Encoding: 7bit > Message-Id: <200406250146.52239.dbjornn(a)cox.net> > X-Virus-Scanned: by amavisd-new at scanhost.suse.de > X-Spam-Status: No, hits=0.1 tagged_above=-20.0 required=5.0 tests=BAYES_44, > RCVD_IN_SORBS > X-Spam-Level: > > On Friday 25 June 2004 01:25, suse-ppc-help(a)suse.com wrote: > > Hi! This is the ezmlm program. I'm managing the > > suse-ppc(a)suse.com mailing list. > > > > I'm working for my owner, who can be reached > > at suse-ppc-owner(a)suse.com. > > > > To confirm that you would like > > > > dbjornn(a)cox.net > > > > added to the suse-ppc mailing list, please send > > an empty reply to this address: > > > > suse-ppc-sc.1088151931.ldobagaaeomohcogmhag-dbjornn=cox.net(a)suse.com > > > > Usually, this happens when you just hit the "reply" button. > > If this does not work, simply copy the address and paste it into > > the "To:" field of a new message. > > > > This confirmation serves two purposes. First, it verifies that I am able > > to get mail through to you. Second, it protects you in case someone > > forges a subscription request in your name. > > > > > > --- Administrative commands for the suse-ppc list --- > > > > I can handle administrative requests automatically. Please > > do not send them to the list address! Instead, send > > your message to the correct command address: > > > > For help and a description of available commands, send a message to: > > <suse-ppc-help(a)suse.com> > > > > To subscribe to the list, send a message to: > > <suse-ppc-subscribe(a)suse.com> > > > > To remove your address from the list, just send a message to > > the address in the ``List-Unsubscribe'' header of any list > > message. If you haven't changed addresses since subscribing, > > you can also send a message to: > > <suse-ppc-unsubscribe(a)suse.com> > > > > For addition or removal of addresses, I'll send a confirmation > > message to that address. When you receive it, simply reply to it > > to complete the transaction. > > > > If you need to get in touch with the human owner of this list, > > please send a message to: > > > > <suse-ppc-owner(a)suse.com> > > > > Please include a FORWARDED list message with ALL HEADERS intact > > to make it easier to help you. > > > > --- Enclosed is a copy of the request I received. > > > > Return-Path: <dbjornn(a)cox.net> > > Received: (qmail 10799 invoked from network); 25 Jun 2004 08:25:31 -0000 > > Received: from unknown (HELO hermes.suse.de) (195.135.221.8) > > by 0 with SMTP; 25 Jun 2004 08:25:31 -0000 > > Received: from scanhost.suse.de (scanhost.suse.de [149.44.160.36]) > > by hermes.suse.de (Postfix) with ESMTP id F04FD8CBFF > > for <suse-ppc-subscribe(a)lists.suse.com>; Fri, 25 Jun 2004 10:25:30 +0200 > > (CEST) Received: from hermes.suse.de ([10.0.0.1]) > > by scanhost.suse.de (scanhost [149.44.160.36]) (amavisd-new, port 10025) > > with ESMTP id 03650-14 for <suse-ppc-subscribe(a)lists.suse.com>; > > Fri, 25 Jun 2004 10:25:29 +0200 (CEST) > > Received: from Cantor.suse.de (cantor.suse.de [195.135.220.2]) > > (using TLSv1 with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits)) > > (No client certificate requested) > > by hermes.suse.de (Postfix) with ESMTP id E3F6F8CC0A > > for <suse-ppc-subscribe(a)suse.com>; Fri, 25 Jun 2004 10:25:29 +0200 > > (CEST) Received: from turing.suse.de (turing.suse.de [195.135.220.3]) > > by Cantor.suse.de (Postfix) with ESMTP id 70A367B6D29 > > for <suse-ppc-subscribe(a)suse.com>; Fri, 25 Jun 2004 10:20:08 +0200 > > (CEST) Content-Disposition: inline > > Content-Transfer-Encoding: quoted-printable > > Content-Type: text/plain > > MIME-Version: 1.0 > > X-Mailer: MIME::Lite 2.117 (F2.71; T0.16; A1.47; B2.12; Q2.03) > > Date: Fri, 25 Jun 2004 08:20:08 UT > > From: dbjornn(a)cox.net > > To: suse-ppc-subscribe(a)suse.com > > Message-Id: <20040625082008.A876715326(a)turing.suse.de> > > X-Virus-Scanned: by amavisd-new at scanhost.suse.de > > X-Spam-Status: No, hits=-1.2 tagged_above=-20.0 required=5.0 > > tests=BAYES_01, MIME_QP_NO_CHARSET, NO_REAL_NAME > > X-Spam-Level:

1 0