Navigation

robertlouwen · #1 17th April 2010, 14:47

Hello all,

Since yesterday I have an other prompt.

Code:

 -bash-4.0# instead of [root@obelix ~]#

I don't know what I did to get it and I don't know how to get out of it

Anybody ?

falko · #2 18th April 2010, 18:39

Did you scan your system with rkhunter or chkrootkit?

robertlouwen · #3 18th April 2010, 23:19

Hello Falko,

RKHunter gets installed when following the perfect server tutorial, isn't it ?
So as far as I know it is running in the background.

Code:

-bash-4.0# ps aux | grep fail2ban
root      2165  0.0  0.4  57204  4888 ?        Sl   Apr17   0:37 /usr/bin/python /usr/bin/fail2ban-server -b -s /var/run/fail2ban/fail2ban.sock -x
root      8816  0.0  0.0   4220   752 pts/0    SN+  23:15   0:00 grep fail2ban

Code:

-bash-4.0# /etc/init.d/fail2ban status
Fail2ban (pid 2165) is running...
Status
|- Number of jail:      2
`- Jail list:           fail2ban, ssh-iptables
You have new mail in /var/spool/mail/root

I believe I don't have chkrootkit installed.

falko · #4 19th April 2010, 11:13

You can run rkhunter like this:

Code:

rkhunter -c

robertlouwen · #5 19th April 2010, 17:29

@ Falko,

attached the rkhunter.log As far as I know nothing found.

So my box is safe ( at this moment ) ? and there is probably an other reason for this.

Robert