[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-security] RaQ4r: chkrootkit odd report: bash_history file size is 0
- Subject: [cobalt-security] RaQ4r: chkrootkit odd report: bash_history file size is 0
 
- From: "Michelle A. Hoyle" <mahlist@xxxxxxxxxxxxx>
 
- Date: Wed, 19 Dec 2001 15:02:12 +0000
 
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
 
I run chkrootkit every night and look at the results the next day. 
The most recent report had something odd in it:
Searching for anomalies in shell history files... Warning: 
`//root/.bash_history' file size is zero
And, if I check the .bash_history file, it is indeed 0 and doesn't 
seem to be writing anything into it.  If I do a "history", it starts 
off with item 0, with something from this session (but the 
.bash_history file is still empty).  Did this file get rotated out of 
existence because it finally got too big or where did it go?
Do I need to worry about this?
Thanks,
Michelle