Critical files in /etc overwritten EMPTY!


 
Thread Tools Search this Thread
Operating Systems HP-UX Critical files in /etc overwritten EMPTY!
# 8  
Old 09-19-2008
find / -type f | grep -v tar| xargs egrep "inittab|inetd.conf|MANPATH"

This will search all file systems mounted on /, so it may take a while. This will show any files that have at least one of the options listed above. It's not pretty, and it still may not hit a match if someone ran a script and then deleted it....

As for authlog... hmm... Look through /var/adm and see what you have for logs. It's been a few months since I've been elbow deep in HP-UX, so I can't shed a great deal of light, I'm afraid... any other helpers?
# 9  
Old 09-19-2008
Thanks for that - not sure why I thought I needed something more complicated than a find combined with grep.

So far I have not found any useful logs, most do not cover the time period.
# 10  
Old 09-19-2008
Just for kicks and giggles, have you:
1. check /var/tmp and /tmp to see if there's anything kicking around in there
2. check ps -ef to see if there's an unexpected process running - maybe for the time that spans between when the file was modified until now?
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Solaris

Replace critical files with errors - pam_UNIX_auth.so.1 & fed

I moved my server while it was running. I was in a hurry. Also it's a bare motherboard with drives in a cage sitting basically on their own. Once I realized how badly I had hurt it doing this, I mounted the board in a tower case I repurposed, mounted the drives, power supply etc. Now the... (1 Reply)
Discussion started by: BillyPrefect
1 Replies

2. Shell Programming and Scripting

How to preserve the value of a variable from being overwritten?

Hi All, I am new new to unix.com, I have a question related to shell scripting. We have a Oracle database backup shell script, which can be used for taking full, incremental & archive log backup based on the parameters passed. Within the script we export a variable as export... (5 Replies)
Discussion started by: veeresh_15
5 Replies

3. What is on Your Mind?

How safe is Dropbox and Ubuntu one? Would you store critical files or programs there? Any comments o

How safe is Dropbox and Ubuntu one? Would you store critical files or programs there? Any comments on the guarantee that the two companies provide and on the technology used for encryption? (1 Reply)
Discussion started by: frad
1 Replies

4. Shell Programming and Scripting

file is getting overwritten

Hello All, I am writing a bash script on Solaris O/S. I looping through an array. For each iteration, i connect to the datatabase and use select statement. Output of which is redirected to .CSV file. here is the code for it. output="loop.csv" elements=${#currency_pair} ... (3 Replies)
Discussion started by: arundhati_s
3 Replies

5. Shell Programming and Scripting

To empty the files

Hi, Using the shell script, how can I empty the files that are under a dir. -Siva (2 Replies)
Discussion started by: gsiva
2 Replies

6. Programming

variables overwritten

Hi, i have some problems with the following code: char *tab_path; char *sep=" \t\n"; char line; char *p; FILE * file; int i = 0; if(fgets(line,MAXLINE,file)!=NULL){ if((p=strtok(line,sep))!=NULL)tab_path=p; while((p=strtok(NULL,sep))!=NULL){ i++; ... (4 Replies)
Discussion started by: littleboyblu
4 Replies

7. Solaris

overwritten rootdisk?

Hi, The dump device on my system was set to /dev/dsk/c0t0d0s7. I have done a savecore -Lv on the system which worked fine. I'm wondering have I overwritten the rootdisk here by mistake? The system is still up but will need to be rebooted due to an error on it. Will it come back up? ... (8 Replies)
Discussion started by: gwhelan
8 Replies

8. Shell Programming and Scripting

Empty Files

Hi, How can I check if a file is empty? I have read that I could done in this way: if then echo "non-zero length file" fi But nothing happens (3 Replies)
Discussion started by: DNAx86
3 Replies

9. AIX

UIDs being overwritten immediately

We have a problem where we delete a user and their associated UID gets dumped back in the UID pool. The if we immediately create a another (new) user, AIX reuses the last UID, the one that was just released. This is causing a problem when reports are being generated because the new users name is... (2 Replies)
Discussion started by: xsys2000
2 Replies

10. UNIX for Advanced & Expert Users

.cshrc and .login overwritten !!

Hi, My account is : abcd I belong to a group: pqrs Some thing straneg happened yesterday. My .cshrc and .login got overwritten into pqrs's .cshrc and .login I obviously did not explicitly overwrite pqrs's .cshrc. Are there any reasons how this could have happened indirectly due to... (5 Replies)
Discussion started by: gjthomas
5 Replies
Login or Register to Ask a Question