Re: [cobalt-security] possible compromise

["Kevin D" <kdlists@xxxxxxxxxxxxxxx>]

I believe the sudden crash probably was either a lock up or some fool
hitting the power switch.

Is there a way to tell from the dmesg log file (which I presume is the boot
log) whether or not the raq was shut down properly? With other red hat linux
systems that I've deployed, on a bootup after a crash/unexpected power down
the system does a hard drive integrity check. Would this show up in the
dmesg log? What would it look like?

When I checked the log, I noted where it said it was scanning hard drive
partitions, but this looked more like a detection sequence than a thorough
test/scan.

Kevin