On Sun, 2 Mar 2003, Carlos A. Siso wrote: > I checked the /etc/profile file and founded that the line 30 has been changed > from: > > USER="`id -un`" > to > USER=b`id -un`" > > The file last modification date is "Mar 11 2002" (Firewall installation date). > Aside from this, I have been unable to detect any other change to this file > or to others firewall's files. There are no unexpected task running, xinetd > is not installed and the firewall script is OK. Overall, the firewall is > operating as expected. > > This seems to me like the hard disk is having problems, but while I have seen > corrupted files before (on other systems with nearly dead hard disks), what > amuse me is the only one byte corruption. Is this possible?? > > Normally I will take this like a hard disk problem, but because this machine > is the firewall, I have some security concern. Could it be that someone is > tampering the firewall? Has anybody seen something like this? yepp, and in my case it was the memory. I recommend running memtest86. Also note, " \042 and b \142 just differ by one bit. Cheers, Michael -- Psyche-list mailing list Psyche-list@redhat.com https://listman.redhat.com/mailman/listinfo/psyche-list
