how to tell when you have a hacker?

Mike bmike101 at cox.net
Sat Feb 18 19:40:03 MST 2006


Thanks for the advise!
>
> You might try looking for /etc/rcX.d/SYYsshd, where "X" is the runlevel
> you start up in, and "YY" is any two digit number. If you find that
> (symlink), rename SYYsshd to KYYsshd (from start to kill). There's
> probably an admin widget to do this for you, but I don't know where to
> find it for you.



More information about the PLUG-discuss mailing list