[SunHELP] Re: Installing LS command

[sunhelp at sunhelp.org]

--openmail-part-3a879d75-00000001
Content-Type: text/plain; charset=US-ASCII
Content-Disposition: inline
	;Creation-Date="Mon, 2 Apr 2001 13:29:07 -0500"
Content-Transfer-Encoding: 7bit

>From the sounds of it there is a good chance that the machine was 
compromised. If you just install a new ls there is no way for you to 
have any type of data integrity because you don't know what was back 
doored. I'd be careful, unless you know for sure that there was no 
compromise.
-Blake

-----Original Message-----
From: kante [mailto:kante at globeaccess.net]
Sent: Monday, April 02, 2001 1:05 PM
To: asr
Cc: kante; list; sunhelp
Subject: [SunHELP] Re: Installing LS command


the problem  of installing new fresh complete solrais software is that I
don't have the source of some some software running on my Box actually. 
So
the best way fo me is to just re-install the LS command if possible. 
But I
don't know how to do it from the solaris CDROM. Could someone help me?
regards,
Souleymane

Adam Rothschild wrote:

> On Wed, Mar 28, 2001 at 04:26:22PM +0000, souleymane kante wrote:
> > I have a Sun Box with solaris 2.6.  I don't know what happen but
> > since monday any user can't see the files and the directories
> > contents with the LS command.  All the files and directories have
> > read permission for everyone but only root can see the files and
> > directories contents with the LS command.
>
> [...]
>
> On Mon, Apr 02, 2001 at 09:59:00AM +0000, souleymane kante wrote:
> > My problem with LS command is not solved. Only root can see files
> > and directories contents with the LS command.  I want install a new
> > LS command from the solaris software CDROM. Is it possible ?
>
> Yes.
>
> > Could this solve the problem ?
>
> Yes.
>
> But a good first step would be to determine how your machine got hosed
> in the first place.  Based upon what you've described to us, it's
> quite possible it was somehow burgled and r00ted up, in which case a
> fresh OS re-install would likely be a more appropriate course of
> action.  Mount your disk[s] on a known good machine, compare MD5 sums
> of key system binaries, etc...
>
> Hope this helps!
> -adam

_______________________________________________
SunHELP maillist  -  SunHELP at sunhelp.org
http://www.sunhelp.org/mailman/listinfo/sunhelp

--openmail-part-3a879d75-00000001--