Mailinglist Archive: opensuse-security (320 mails)

< Previous Next >
[suse-security] Strange behaviour of SuSE
  • From: Bill.Light@xxxxxx
  • Date: Thu, 15 May 2003 10:17:18 -0700
  • Message-id: <OF1DC8ACAC.2F342F5B-ON88256D27.005E15A0@xxxxxx>
If no one else has answered - You've been rooted...

See how to do it at Cyberborneo:

Take the machine off line - you don't own it anymore....


Hi there!

I have a little problem with our Linux server and I don't know, if it's
perhaps a security problem.

We run a samba server with SuSE 7.3

Last days, it behaves a little bit strange:

At the first time, I wasn't able to login at the console with the root
account. After entering the username root, nothing happens. From remote
ssh, I could login.

Now, after some days, no root login is possible - even ssh says "access

When I login as normal user, I see two files in the root directory of the
volume named "devory" and "slamet". I didn't create the files. They have
same date attribute and nearly the same time attribute.

The server itself seems to work without problems.

Is this a security problem, a hard disk problem or what else?


Wolfgang Eul

Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here

< Previous Next >
This Thread
  • No further messages