how to tell when you have a hacker?

[Darrin Chandler]

Mike wrote:

>On Saturday 18 February 2006 09:10 am, Darrin Chandler wrote:
>  
>
>>Unless you need sshd running it should be disabled. For a home box it's
>>a pretty good bet you don't need it running.
>>    
>>
>
>Geesh! Why didn't I think of that? Should I just comment out everything in 
>this file?
>  
>

No. Commenting everything out will just make it use default values for 
everything. What you want is to stop the daemon, and disable it. Craig's 
suggestions are as good as mine would be, since I'm not a debian person 
either.

Any debian people out there know the one tru way to disable a daemon?

You might try looking for /etc/rcX.d/SYYsshd, where "X" is the runlevel 
you start up in, and "YY" is any two digit number. If you find that 
(symlink), rename SYYsshd to KYYsshd (from start to kill). There's 
probably an admin widget to do this for you, but I don't know where to 
find it for you.

-- 
Darrin Chandler            |  Phoenix BSD Users Group
dwchandler at stilyagin.com   |  http://bsd.phoenix.az.us/
http://www.stilyagin.com/  |