[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-security] RaQ4r: chkrootkit odd report: bash_history file size is 0



I run chkrootkit every night and look at the results the next day. The most recent report had something odd in it:

Searching for anomalies in shell history files... Warning: `//root/.bash_history' file size is zero

And, if I check the .bash_history file, it is indeed 0 and doesn't seem to be writing anything into it. If I do a "history", it starts off with item 0, with something from this session (but the .bash_history file is still empty). Did this file get rotated out of existence because it finally got too big or where did it go?

Do I need to worry about this?

Thanks,

Michelle