At 8:04 PM -0700 11/21/05, Ashley M. Kirchner wrote: > This is why I tell people I know that vacation for me doesn't mean a >dang thing...it's just another working day for me. This morning I >received an e-mail from a client that has his machine co-located with >me. It seems over the weekend he screwed with "something" which caused >several things on the system to quit working. After hunting for a bit >(and looking at his .bash_history) I figured that he ran a few 'chown' >commands in places like /usr/sbin and lord knows where else. So, now >I'm trying to figure out if: > > a) I need rebuild his machine from scratch, or > b) if there's some way that I can verify binary permissions and what >not, possibly by running some rpm verify command? I don't know. > > Part of me wants to simply rebuild the machine, but at the same time >I don't have time to go through this right now. Change the password on the root account so he can't keep doing this. Ask rpm to verify all the installed RPMs (rpm -Va). Look through his bash command history to see what commands he used. ____________________________________________________________________ TonyN.:' <mailto:tonynelson@xxxxxxxxxxxxxxxxx> ' <http://www.georgeanelson.com/>
