From: Kevin Metzger (kevin@pmimail.com)
Date: Fri Mar 21 2003 - 15:43:21 EST
I think I've been hit by invaders and want to verify commonly molested
commands before running them. systems are Solaris 7 and 8 on sparc and x86.
The evidence is the output from last:
dwayne console Fri Mar 21 14:15 - 14:19 (00:04)
root pts/17 host130-220.pool Fri Mar 21 13:56 - 14:01 (00:04)
adm pts/16 host130-220.pool Fri Mar 21 13:56 - 13:57 (00:00)
Dwayne is my tech support, but how is someone getting in as adm directly? One
other machine here shows root, adm and bin logging in. I'm seeing this on
three seperate machines.
thanks in advance and I summarize.
-- Kevin Metzger Systems Administrator Progressive Medical, Inc. 800 777-3574 x2686 desk 614 378-6396 mobile 614 389-0740 fax _______________________________________________ sunmanagers mailing list sunmanagers@sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers
This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:26:02 EDT