[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
/sbin gone
I woke up this morning to find my backup script failed and the
following in daily insecurity:
Checking setuid/setgid files and devices:
Setuid deletions:
-r-sr-xr-x 1 root bin 178892 Sep 17 01:59:36 2003 /sbin/ping
-r-sr-xr-x 1 root bin 194860 Sep 17 02:00:12 2003 /sbin/ping6
-r-sr-x--- 1 root operator 161164 Sep 17 01:59:44 2003 /sbin/shutdown
======
I logged in and /sbin is gone.
It doesn't appear that I've been cracked or anything as I'm currently
up with -stable and as /sbin missing seems to be the only problem.
I see the following in /var/log/messages:
Feb 19 18:43:22 grits /bsd: wd0(pciide0:0:0): timeout
Feb 19 18:43:23 grits /bsd: type: ata
Feb 19 18:43:23 grits /bsd: c_bcount: 8192
Feb 19 18:43:23 grits /bsd: c_skip: 0
Feb 19 18:43:23 grits /bsd: pciide0:0:0: bus-master DMA error: missing
interrupt, status=0x61
Feb 19 18:43:23 grits /bsd: pciide0 channel 0: reset failed for drive 0
drive 1
Feb 19 18:43:23 grits /bsd: wd0f: device timeout reading fsbn 7632800
of 7632800-7632815 (wd0 bn 19168352; cn 19016 tn 3 sn 35), retrying
Feb 19 18:43:23 grits /bsd: wd0: soft error (corrected)
I haven't run fsck or rebooted yet. I haven't had any hard drive
errors in ages, what type of problem am I seeing above?
I'm trying to scp or ftp a backup over to my system but for some reason
scp and ftp are hideously slow at the moment, http seems to be fine,
though. I'm currently burning a CD to transfer the backup over to my
server.
Any input would be much welcome. More info can be provided but I'm in
the middle of a million things at the moment.
Thanks, Greg