[Plug-security] Once cracked

[Carl Parrish]

I've got postgres installed checking now to see if the created dates match.

Carl P.

P.S. thanks guys. (this was *really* worriing me).

Nathan England wrote:

>I think most suse installs add an 'operator' user.  Is there any
>databases installed?  Usually the operator goes with a database.  I've
>seen it with postgres and oracle..
>
>nathan
>
>On Mon, 2001-09-10 at 18:05, Rusty Carruth wrote:
>
>>>operator. still haven't seen anything done by it. if it wasn't a member 
>>>of the root group I would just assume something I installed put it 
>>>
>>Oh my mandrake 7.1 system:
>>bash-2.04$ egrep operator /etc/passwd
>>operator:x:11:0:operator:/root:/bin/false
>>bash-2.04$ 
>>
>>So I think you're safe there.  Don't re-install!
>>
>>>there. I've tried using last or su ing to opertor then pulling history 
>>>
>>Did you 'su' or 'su -'???
>>
>>>but so far nothing. It would be nice if I didn't have to wipe my 
>>>computer but at this point I'm thinking better safe than sorry. So if 
>>>anyone knows why operator would be there please let me know.
>>>
>>Somebody somewhere thought operator needed to be in the user groups...
>>
>>rc
>>_______________________________________________
>>Plug-security mailing list  -  Plug-security@lists.PLUG.phoenix.az.us
>>http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-security
>>