(Answer) (Category) OSU Physics Faq's : (Category) Linux : (Category) Security :
How can I tell if my machine has been cracked?
* Check the /etc/passwd file see (http://ntg4004.mps.ohio-state.edu/cgi-bin/fom?file=89) for details.

* Look for /.bash_history linked to /dev/null
2000-Mar-23 9:31am furnstahl.1@osu.edu

[Append to This Answer]
2000-Mar-23 9:31am
Previous: (Answer) How do I find all of the SUID and SGID files?
Next: (Answer) How can I automatically keep track of my system log files?
This document is: http://www.physics.ohio-state.edu/cgi-bin/fom?file=91
[Search] [Appearance] [Show Expert Edit Commands]
This is a Faq-O-Matic 2.721.