Re: how to tell when you have a hacker?

Top Page
Attachments:
Message as email
+ (text/plain)
Delete this message
Reply to this message
Author: Darrin Chandler
Date:  
To: Main PLUG discussion list
Subject: Re: how to tell when you have a hacker?
Mike wrote:

>On Saturday 18 February 2006 09:10 am, Darrin Chandler wrote:
>
>
>>Unless you need sshd running it should be disabled. For a home box it's
>>a pretty good bet you don't need it running.
>>
>>
>
>Geesh! Why didn't I think of that? Should I just comment out everything in
>this file?
>
>


No. Commenting everything out will just make it use default values for
everything. What you want is to stop the daemon, and disable it. Craig's
suggestions are as good as mine would be, since I'm not a debian person
either.

Any debian people out there know the one tru way to disable a daemon?

You might try looking for /etc/rcX.d/SYYsshd, where "X" is the runlevel
you start up in, and "YY" is any two digit number. If you find that
(symlink), rename SYYsshd to KYYsshd (from start to kill). There's
probably an admin widget to do this for you, but I don't know where to
find it for you.

-- 
Darrin Chandler            |  Phoenix BSD Users Group
   |  http://bsd.phoenix.az.us/
http://www.stilyagin.com/  |


---------------------------------------------------
PLUG-discuss mailing list -
To subscribe, unsubscribe, or to change you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss