All of a sudden, all of our "non-system" mounted disks on our server
changed from drwx r-x r-x to d--- --- --- ! (ex: /home1 top level, nothing
below it changed).
It included 5 partitions, (not including /, /var, /tmp, /usr, /usr/local)
The partitions remained mounted and in use.
Anyone know what may cause such a thing?
I'm the only one with root password, and I've checked for the basic signs
so far for hackers. Nothing obvious, and no tripwires setoff.
I just did a chmod 755 back and they seem ok for now. Nothing in the logs.
[On a different small note, I know the cautions of changing shell for root
(currently /bin/sh), is there something that I can log commands like bash
does in .bash_history?]
--------------------------------------------------------------------------
Dan Kirkpatrick dkirk_at_phy.syr.edu
Computer Systems Manager
Department of Physics
Syracuse University, Syracuse, NY
http://www.phy.syr.edu/~dkirk Fax: (315) 443-9103
--------------------------------------------------------------------------
Received on Wed Oct 13 1999 - 17:14:02 NZDT