[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-security] [raq3] prw-r--r-- 1 root root 0 Jun 13 11:36 pipe
- Subject: RE: [cobalt-security] [raq3] prw-r--r-- 1 root root 0 Jun 13 11:36 pipe
- From: "Dean Hall" <dean@xxxxxxxxxx>
- Date: Wed, 11 Jul 2001 11:21:38 -0700
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
>
>
> I would delete it, unless you know why it's there. You may
> have been compromised, and chances are if the intruder was
> sloppy enough to leave that file behind then there are
> probably other signs as well. Take a look around your box.
You could install the lsof rpm and find out what processes are using it.
Have you tried to correlate the date of it's creation with any package
installs you may have done?
----
Dean Hall at Tactix ReEngineering ( dean@xxxxxxxxxx )
503 520-9699 http://www.tactix.com
>