Re: [opensuse] errant 'who' behavior

On Wed, 2007-01-03 at 16:49 +0100, Dominique Leuenberger wrote:
Hi,

Reply on 03-01-2007 17:46:56 <<<

Hi All,

This is actually a two part question. a) Is there a 100%
proof-positive
way to
determine if someone has previously broken into a system via ssh...
before
remote root logins were disabled and a weak password replaced... and
b)
how
do I correct the apparent inability of 'who', given any parameters,
to
return
something more informative than just a prompt?

to be sure that 'who' is the program you expect, I would first try to
rpm -q --verify coreutils
(this will give some output in case some files out of coreutils, to
which 'who' belongs, were modified.

In case I would STILL be in doubt (so the above command did not give
any output), you can always post the md5sum of your who binary and let
it compare by somebody else.

554dd55cc223db9293f056da85ca1891 /usr/bin/who

is from my 10.0 32bit system

--
Ken Schneider
UNIX since 1989, linux since 1994, SuSE since 1998

--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx

Relevant Pages

  • Re: [opensuse] errant who behavior
    ... remote root logins were disabled and a weak password replaced... ... (this will give some output in case some files out of coreutils, ... In case I would STILL be in doubt (so the above command did not give ... version of SuSE and update state (in case coreutils got ...
    (SuSE)
  • coreutils-6.9.92 released
    ... Coreutils version 6.9.92 has been released. ... For a summary of changes and contributors, ... If that command fails because you don't have the required public key, ... tr's case conversion would fail in a locale with differing numbers ...
    (gnu.announce)
  • coreutils-6.9 released [stable]
    ... Coreutils version 6.9 has been released. ... If that command fails because you don't have the required public key, ...
    (gnu.announce)
  • coreutils-6.9.91 released (bug-fix-only)
    ... Coreutils version 6.9.91 has been released. ... There has been unusually few reports of problems with ... If that command fails because you don't have the required public key, ...
    (gnu.announce)
  • coreutils-7.2 released [stable]
    ... While there is a nominal feature addition, it affects only "pwd", ... and the program from coreutils typically shadows the shell built-in, ... or run this command from a git-cloned coreutils directory: ... Gnulib v0.0-2012-gfa34865 ...
    (gnu.announce)