[95430] in RedHat Linux List
Re: do I have a visitor?
daemon@ATHENA.MIT.EDU (Gordon Messmer)
Sun Oct 18 14:33:28 1998
Date: Sun, 18 Oct 1998 11:31:21 -0700
From: Gordon Messmer <yinyang@eburg.com>
To: redhat-list@redhat.com
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
Charles Galpin wrote:
>
> Thanks for replying Gordon.
No problem, I'm not a security expert (far from it) but I'm interested
in keeping my personal machines, and my machines at work fairly safe.
[snip]
>
> imap-4.1.final-1
> # ldd /usr/sbin/imapd
> libcrypt.so.1 => /lib/libcrypt.so.1 (0x40004000)
> libc.so.6 => /lib/libc.so.6 (0x40031000)
> /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x00000000)
>
> do these dependecies look correct? I still don't know the difference between
> glibc and ??
Hmm.. I get:
ldd /usr/sbin/imapd
libpam.so.0 => /lib/libpam.so.0 (0x40005000)
libdl.so.2 => /lib/libdl.so.2 (0x4000c000)
libc.so.6 => /lib/libc.so.6 (0x4000f000)
/lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x00000000)
Difference is: Yours doesn't look like it was built for PAM. Is that
why
you recompiled? If not, then why did you recompile (curiosity)?
> I get the following in /dev. I looked up what the G, M, U stand or, but have
> no idea what's correct or not. Why some of the ttys have a different user of
> group I don't know. Could this be the result of being hacked? can someone
> tell me what to change them to? I've annotated the rpm output with the
> filesystem permissions
>
[snip]
As far as I can tell, the ttys look fine. They get changed around
when
you telnet in.
> the only other program I have compiled on my system is the majordomo
> wrapper:
> # ls -l /usr/local/majordomo-1.94.4/wrapper
> -rwsr-xr-x 1 root daemon 6755 Sep 24 21:44
> /usr/local/majordomo-1.94.4/wrapper
Didn't think of this before, but what lists are you serving with that?
Is it possible the message bounces are coming from someone subscribed
or trying to post to one of your lists? Also, make sure that if
sendmail is acting as a relay that it's not promiscuous in doing so.
MSG
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com http://archive.redhat.com
To unsubscribe: mail redhat-list-request@redhat.com with
"unsubscribe" as the Subject.
