問題大了，現在發現三個問題
不知道會不會有其他的問題還待發現@@a
應該不是被hack，因為機器是放在區網內部作練習用的，沒開埠口到外面
系統是FreeBSD 4.9 Release，沒有重新編過核心
id的結果確定是root沒錯
麻煩板上諸位有能的仁兄了.....
===========================================================
第一個問題是我發現許多用root執行的程式
卻沒有以root權限跑
像是periodic
===========================================================
第二個問題
除了root之外的user不能login
login打完密碼後會說找不到家目錄....
root要su過去也不行
確定過master.passwd沒被改過了
我用script記錄了一下：
Script started on Wed Apr 21 22:51:00 2004
pneuma# su guest -
su: /bin/tcsh: Permission denied
pneuma# su sysadmin -
su: /bin/tcsh: Permission denied
pneuma# su ftp -
su: /bin/tcsh: Permission denied
pneuma# exit
exit
Script done on Wed Apr 21 22:51:54 2004
===========================================================
另外就是man出問題
我看了libz.so.2的檔案日期，確定沒被動過....
Script started on Wed Apr 21 22:44:19 2004
pneuma# man b5c
/usr/libexec/ld-elf.so.1: Cannot open "/usr/lib/libz.so.2"
pneuma# man gcc
/usr/libexec/ld-elf.so.1: Cannot open "/usr/lib/libz.so.2"
pneuma# man ssh
/usr/libexec/ld-elf.so.1: Cannot open "/usr/lib/libz.so.2"
pneuma# man ftp
/usr/libexec/ld-elf.so.1: Cannot open "/usr/lib/libz.so.2"
pneuma# man date
/usr/libexec/ld-elf.so.1: Cannot open "/usr/lib/libz.so.2"
pneuma# exit
exit
Script done on Wed Apr 21 22:45:29 2004
===========================================================
附上最近的一次dmesg紀錄：
Copyright (c) 1992-2003 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 4.9-RELEASE #0: Mon Oct 27 17:51:09 GMT 2003
[email protected]:/usr/obj/usr/src/sys/GENERIC
Timecounter "i8254" frequency 1193182 Hz
CPU: Pentium/P55C (199.96-MHz 586-class CPU)
Origin = "GenuineIntel" Id = 0x543 Stepping = 3
Features=0x8001bf<FPU,VME,DE,PSE,TSC,MSR,MCE,CX8,MMX>
real memory = 67108864 (65536K bytes)
config> di bt0
config> di aic0
config> di aha0
config> di adv0
config> q
avail memory = 59801600 (58400K bytes)
Preloaded elf kernel "kernel" at 0xc0567000.
Preloaded userconfig_script "/boot/kernel.conf" at 0xc056709c.
Preloaded elf module "smbfs.ko" at 0xc05670ec.
Preloaded elf module "libmchain.ko" at 0xc056718c.
Preloaded elf module "libiconv.ko" at 0xc0567230.
Intel Pentium detected, installing workaround for F00F bug
netsmb_dev: loaded
md0: Malloc disk
npx0: <math processor> on
motherboard
npx0: INT 16 interface
pcib0: <Host to PCI bridge> on motherboard
pci0: <PCI bus> on pcib0
isab0: <AcerLabs M1533 portable PCI-ISA bridge> at device 2.0 on pci0
isa0: <ISA bus> on isab0
rl0: <RealTek 8139 10/100BaseTX> port 0xec00-0xecff mem 0xebfeff00-0xebfeffff irq 11 at device 3.0 on pci0
rl0: Ethernet address: 00:c0:26:72:6a:7d
miibus0: <MII bus> on rl0
rlphy0: <RealTek internal media interface> on miibus0
rlphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
pci0: <S3 ViRGE graphics accelerator> at 6.0 irq 0
atapci0: <AcerLabs Aladdin ATA33 controller> port 0xffa0-0xffaf irq 0 at device 11.0 on pci0
ata0: at 0x1f0 irq 14 on atapci0
ata1: at 0x170 irq 15 on atapci0
orm0: <Option ROM> at iomem 0xc0000-0xc7fff on isa0
pmtimer0 on isa0
fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0
fdc0: FIFO enabled, 8 bytes threshold
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
atkbd0: <AT Keyboard> flags 0x1 irq 1
on atkbdc0
kbd0 at atkbd0
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: model IntelliMouse, device ID 3
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16550A
ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0
ppc0: Generic chipset (EPP/NIBBLE) in COMPATIBLE mode
plip0: <PLIP network interface> on ppbus0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
ad0: 12893MB <ST313620A> [26197/16/63] at ata0-master UDMA33
acd0: CDROM <HITACHI CDR-7730> at ata0-slave PIO0
Mounting root from ufs:/dev/ad0s1a
--
╭──── Origin:<不良牛牧場> bbs.badcow.com.tw (210.200.247.200)─────╮
│ ↘ Welcome to SimFarm BBS -- From : [218.187.6.112] │
╰◣◣◢ ◢◢《不良牛免費撥接→電話:40586000→帳號:zoo→密碼:zoo》 ◣◣◢ ─╯