[14967] in Hotline Meeting
RE:Workstation Problem
daemon@ATHENA.MIT.EDU (jjmorey@Athena.MIT.EDU)
Fri Apr 9 11:00:20 1993
From: jjmorey@Athena.MIT.EDU
To: op@Athena.MIT.EDU
Cc: hotline@Athena.MIT.EDU
Date: Fri, 09 Apr 93 11:00:10 EDT
Hi Brian-
The reason why I though your group might want to take a look at
this system is because it involved the compromise of a students
account. I talked to Young a little while ago and he said he'd
take a quik look at it.
After Young is done someone in our group will probably reinstall.
Thanks for your groups help.
:)
JJ
------- Forwarded Message
Received: from ATHENA-AS-WELL.MIT.EDU by po7.MIT.EDU (5.61/4.7) id AA00793; Fri, 9 Apr 93 09:55:07 EDT
Received: from KIDCRASH.MIT.EDU by Athena.MIT.EDU with SMTP
id AA23398; Fri, 9 Apr 93 09:55:02 EDT
From: bwmelans@Athena.MIT.EDU
Received: by kidcrash (5.57/4.7) id AA02778; Fri, 9 Apr 93 09:55:00 -0400
Message-Id: <9304091355.AA02778@kidcrash>
To: jjmorey@Athena.MIT.EDU
Cc: op@Athena.MIT.EDU
Subject: RE:workstation problem
Date: Fri, 09 Apr 93 09:54:59 EDT
John, I would suggest getting the information for user accounts and
running "track -n -c" to see if any changes have been made to the
workstation. This must be done as root and if anything shows up from
track then re-install.
Brian
>Derrick (starflt), from user accounts, was the one who initially asked
>us to have someone from hotline check wtmp on the workstation. Carla
>(who is also the consulting supervisor), is not around today. Also,
>the people in user accounts can check the account information, but not
>the machine info. Thanks.
> o Christina DeMello
> o IS/CSS Student Consultant
> o cdemello@athena
>Hi Op-
>
>Is this something your group might want to look into, or should we
>just reinstall the system?
>
>4-9-93
>7:30am
>JJ
Brian Melanson
Distributed Systems
Systems Support Group
------- End of Forwarded Message
