[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-security] Qube 2 restore weirdness
- Subject: [cobalt-security] Qube 2 restore weirdness
- From: Jay Nelson <jay@xxxxxxxxxxx>
- Date: Mon, 17 Dec 2001 16:06:58 -0800
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
I thought my Qube 2 was root kitted because ps -A
didn't work right and the .bash-history file was not
working properly.
> ps -A
warning: `-' deprecated; use `ps A', not `ps -A'
unrecognized option or trailing garbage
usage: ps -acehjlnrsSuvwx{t<tty>|#|O[-]u[-]U..} \
--sort:[-]key1,[-]key2,...
--help gives you this message
--version prints version information
Whenever I look at the .bash-history for root when
logged in as root it is always 0 length. I can see
when logged in as admin that it is some 27 bytes,
but as soon as I su it becomes 0 again.
So I restored from a freshly downloaded image that
was placed on CD. Immediately after restore I have
the same behavior. No ps -A and no .bash-history.
Is this normal behavior for a Qube 2?
jay
---------------------------------------------------
DuoMark International, Inc.
6523 Colgate Avenue, Suite 325
Los Angeles, CA 90048-4410 / USA
Voice: +1 323 381-0002
FAX: +1 323 549 0172
Email: jay@xxxxxxxxxxx
WWW: http://www.duomark.com/