[Sunhelp] Urgent help needed!

[Melinda Taylor]

And just to show I panicked.... :D
I realised I need to copy the 'su' program over to a crossmounted
directory that was *local* to the machine I was having problems with.
I could then su and all is fine though I still have no idea
why the permission on /var/spool/mqueue changed :)

Thanks,

Melinda


On Mon, 15 Nov 1999, Melinda Taylor wrote:

> 
> 
> Actually after some experimentation on my other solaris boxes......I
> I realised I could just copy over the su program (with the correct
> ownership/permissions) onto one of the crossmounted directories and then
> 'su' giving the direct path the copied over su program.
> 
> I checked that this worked on the machines I am not having troubles with
> ie typing '/data8/melinda/su' (where -r-sr-xr-x   1 root     sys
> 18360 Jan 16  1998 /data8/melinda/su) let me gain superuser access.
> 
> Doing this on the machine I am having problems with
> still does not enable me to gain root access....
> suggesting the problem is that the su password has been changed.
> 
> This conclusion correlates based on the fact that permission
> on the /var/spool/mqueue have also magically been changed so
> that no-one has write permission so no-one can send mail.....
> and I can't su to change it!
> 
> So I guess I should change my question to 'how can I reset the su
> password'?
> 
> Many thanks,
> 
> Melinda
> 
> 
> 
> On Mon, 15 Nov 1999, Melinda Taylor wrote:
> 
> > 
> > Hello,
> > 
> > I stupidly changed all the ownerships of the files in the /bin
> > directory (don't ask me how/why it was an accident ;)
> > I now can't 'su'. The current permission/ownership is as follows:
> > 
> > -r-s--x--x   1 bin      sys        18360 Jan 16  1998 /bin/su*
> > 
> > When I know it should be something like this:
> > 
> > -r-sr-xr-x   1 root     sys        18360 Jan 16  1998 su*
> > 
> > I have other solaris machines so I was thinking I could maybe
> > just copy over the 'su' proggie from there but that doesn't seem to work.
> > 
> > Or maybe something even worse has happened (ie my machines are
> > always being attacked)? 
> > 
> > Any suggestions as to my next step?
> > 
> > Thanks,
> > 
> > Melinda
> > 
> > 
> > 
> > _______________________________________________
> > SunHELP maillist  -  SunHELP at sunhelp.org
> > http://www.sunhelp.org/mailman/listinfo/sunhelp
> > 
> 
> 
> 
> _______________________________________________
> SunHELP maillist  -  SunHELP at sunhelp.org
> http://www.sunhelp.org/mailman/listinfo/sunhelp
>