[plug] [joey at infodrom.org: Some Debian Project machines have been compromised]

[Chris Caston]

On Fri, 2003-11-21 at 23:15, James Devenish wrote:
> In message <1069426953.683.10.camel at syngery>
> on Fri, Nov 21, 2003 at 11:02:33PM +0800, Chris Caston wrote:
> > I seem to have famd running while apparently keeps track of when there
> > are changes in the file system. It has worrying options in /etc/fam.conf
> > like:
> > 
> > insecure_compatibility = false
> > local_only = false
> > untrusted_user = nobody
> > 
> > I have no idea where else this could have come from.
> 
> What are you saying? Is this part of the Debian thread at all? Are you
> talking about your own machine? Did you install famd yourself or are you
> saying it doesn't belong to any package and you don't remember
> installing it yourself?
> 

Yeah that one. I'd never heard of it before and I think it might be sus.

> 
> _______________________________________________
> plug mailing list
> plug at plug.linux.org.au
> http://mail.plug.linux.org.au/cgi-bin/mailman/listinfo/plug
> 

_______________________________________________
plug mailing list
plug at plug.linux.org.au
http://mail.plug.linux.org.au/cgi-bin/mailman/listinfo/plug