05-23-2005
Do "normal" users own other executables (in the /bin, /sbin, /usr/bin and /usr/sbin directories)? Sometimes you'll see executables owned by "bin" - this is normal. If a true "normal" user owns these files, chances are you've been
compromised!
Does anybody other than yourself know the root password? Have you noticed lots of failed ssh connections, etc? Check your logs (/var/log/messages) and see if anything naughty is going on. Good luck.
If you've been compromised, you're only real option is to restore trusted executables - whether this be from installation media/backups depends upon your disaster recovery procedures.
And all of this assumes that you actually
have been compromised. And remember, a great deal of compromises come from somebody
inside organisations
Cheers
ZB
10 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
The df/bdf command shows /proc 100% full all the time. What does /proc contain? and why 100% all the time even on a new setup. (1 Reply)
Discussion started by: asutoshch
1 Replies
2. UNIX for Dummies Questions & Answers
hi,
we all know /proc is about the information of active process,
I have just read an artical which said you can use /proc/cpuinfo,
/proc/net./proc/meminfo etc. to know about some hardware
information .But I want to know how to use with command line? (1 Reply)
Discussion started by: fuqiang1976
1 Replies
3. UNIX for Advanced & Expert Users
Anyone know what the difference between the /proc filesystems under Linux and SunOS?
Thanx In Advance!
-Lola (1 Reply)
Discussion started by: Sparticus007
1 Replies
4. Programming
Hello all ,
We have a c program ,
it is running well on AIX 4.3.3.0 .But when we run it on
AIX 4.2.1.0 version the program exit when it begin to do this
command : Exec sql connect .
N.B: The version of C compiler is :4.2
Database :Oracle8
thanks in advance .
Elie . (2 Replies)
Discussion started by: eyounes
2 Replies
5. UNIX for Advanced & Expert Users
/proc is filing up my root filesystem. Can you delete any of the4 ID numbers out of /proc. Please help me. (3 Replies)
Discussion started by: aojmoj
3 Replies
6. UNIX for Dummies Questions & Answers
I did a search on this, but didn't find exactly the answer I'm looking for. What exactly is the proc directory for? Showing processes spawned by users? I ask because I have some very large files in that directory by multiple users and its affecting my disk usage. Can you limit how many... (2 Replies)
Discussion started by: kymberm
2 Replies
7. Programming
1. Software Requirments For Pro*c/c++ ,
2. Need Pro* C/c++ Compiler,
3. Documents For Installing Proc* C Compiler (3 Replies)
Discussion started by: contactmadhuin
3 Replies
8. Programming
:)
hi all !
Please help me
When I select data from oracle with proc * C prog.
I count the number of rows
For example the total rows is 1000000
but the number of result return is a limit number 5000 for ex
So How can I know this limit (5 Replies)
Discussion started by: iwbasts
5 Replies
9. UNIX for Dummies Questions & Answers
Hi,
I am trying to calculate the CPU Usage by getting the difference between the idle time reported by /proc/stat at 2 different intervals. Now the 4th entry in the first line of /proc/stat will give me the 'idle time'. But I also came across /proc/uptime that gives me 2 entries : 1st one as the... (0 Replies)
Discussion started by: coderd
0 Replies
10. UNIX for Dummies Questions & Answers
If you are adding the kernel module without any module parameter passing, it should print out following information to info1 file so that user can make read access to info1 file (via, for example, cat /proc/info1):
• Processor type
• Kernel version
• Total number of the processes currently... (1 Reply)
Discussion started by: shekhar.huded
1 Replies
GZEXE(1) General Commands Manual GZEXE(1)
NAME
gzexe - compress executable files in place
SYNOPSIS
gzexe name ...
DESCRIPTION
The gzexe utility allows you to compress executables in place and have them automatically uncompress and execute when you run them (at a
penalty in performance). For example if you execute ``gzexe /usr/bin/gdb'' it will create the following two files:
-rwxr-xr-x 1 root root 1026675 Jun 7 13:53 /usr/bin/gdb
-rwxr-xr-x 1 root root 2304524 May 30 13:02 /usr/bin/gdb~
/usr/bin/gdb~ is the original file and /usr/bin/gdb is the self-uncompressing executable file. You can remove /usr/bin/gdb~ once you are
sure that /usr/bin/gdb works properly.
This utility is most useful on systems with very small disks.
OPTIONS
-d Decompress the given executables instead of compressing them.
SEE ALSO
gzip(1), znew(1), zmore(1), zcmp(1), zforce(1)
CAVEATS
The compressed executable is a shell script. This may create some security holes. In particular, the compressed executable relies on the
PATH environment variable to find gzip and some standard utilities (basename, chmod, ln, mkdir, mktemp, rm, sleep, and tail).
BUGS
gzexe attempts to retain the original file attributes on the compressed executable, but you may have to fix them manually in some cases,
using chmod or chown.
GZEXE(1)