🚀 go-pugleaf

On Sat, 29 Nov 1997, da daf wrote:

> 	a person whom i had give telnet access on my linux 2.0.30
> server hacked root and then left a backdoor before i could get rid of
> him. i got rid of his bdoor and all the lkr3 files that he had hidden
> in my /tmp dir. he said i could close his back door by editing one
> file. anyone know anything about it??

Quit epossibly you haven't removed his backdoor. When people hack into
your site, it's prudent to check all files that are setuid root, and also
check your kernel -- when was it last updated, and has your vmlinuz file
changed in size.

Maybe it'll teach you to use something like tripwire, to prevent this kind
of stuff.

--
Michael Strates          /\  e-mail: mstrates@minkirri.apana.org.au 
+61-3-9458-4787          /\  http  : http://linloft.home.ml.org/
Avail. for Contract UNIX /\  saft  : saft://minkirri.apana.org.au/mstrates
Sys. Admin. Tasks.       /\  finger: mstrates@minkirri.apana.org.au
BoyCott Internet SPAM!   /\  pgp   : 3D68CFB3C61B3A05 7FC68308A3BC0B86

 Some people have told me they don't think a fat penguin really embodies
 the grace of Linux, which just tells me they have never seen a angry
 penguin charging at them in excess of 100mph. They'd be a lot more
 careful about what they say if they had.
      -- Linus Torvalds