[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

/sbin gone



I woke up this morning to find my backup script failed and the 
following in daily insecurity:

Checking setuid/setgid files and devices:
Setuid deletions:
-r-sr-xr-x 1 root bin 178892 Sep 17 01:59:36 2003 /sbin/ping
-r-sr-xr-x 1 root bin 194860 Sep 17 02:00:12 2003 /sbin/ping6
-r-sr-x--- 1 root operator 161164 Sep 17 01:59:44 2003 /sbin/shutdown


======

I logged in and /sbin is gone.

It doesn't appear that I've been cracked or anything as I'm currently 
up with -stable and as /sbin missing seems to be the only problem.

I see the following in /var/log/messages:


Feb 19 18:43:22 grits /bsd: wd0(pciide0:0:0): timeout
Feb 19 18:43:23 grits /bsd:     type: ata
Feb 19 18:43:23 grits /bsd:     c_bcount: 8192
Feb 19 18:43:23 grits /bsd:     c_skip: 0
Feb 19 18:43:23 grits /bsd: pciide0:0:0: bus-master DMA error: missing 
interrupt, status=0x61
Feb 19 18:43:23 grits /bsd: pciide0 channel 0: reset failed for drive 0 
drive 1
Feb 19 18:43:23 grits /bsd: wd0f: device timeout reading fsbn 7632800 
of 7632800-7632815 (wd0 bn 19168352; cn 19016 tn 3 sn 35), retrying
Feb 19 18:43:23 grits /bsd: wd0: soft error (corrected)

I haven't run fsck or rebooted yet.  I haven't had any hard drive 
errors in ages, what type of problem am I seeing above?

I'm trying to scp or ftp a backup over to my system but for some reason 
scp and ftp are hideously slow at the moment, http seems to be fine, 
though.  I'm currently burning a CD to transfer the backup over to my 
server.

Any input would be much welcome.   More info can be provided but I'm in 
the middle of a million things at the moment.

Thanks, Greg