问题大了，现在发现三个问题 不知道会不会有其他的问题还待发现@@a 应该不是被hack，因为机器是放在区网内部作练习用的，没开埠口到外面 系统是FreeBSD 4.9 Release，没有重新编过核心 id的结果确定是root没错 麻烦板上诸位有能的仁兄了..... =========================================================== 第一个问题是我发现许多用root执行的程式 却没有以root权限跑 像是periodic =========================================================== 第二个问题 除了root之外的user不能login login打完密码後会说找不到家目录.... root要su过去也不行 确定过master.passwd没被改过了 我用script记录了一下： Script started on Wed Apr 21 22:51:00 2004 pneuma# su guest - su: /bin/tcsh: Permission denied pneuma# su sysadmin - su: /bin/tcsh: Permission denied pneuma# su ftp - su: /bin/tcsh: Permission denied pneuma# exit exit Script done on Wed Apr 21 22:51:54 2004 =========================================================== 另外就是man出问题 我看了libz.so.2的档案日期，确定没被动过.... Script started on Wed Apr 21 22:44:19 2004 pneuma# man b5c /usr/libexec/ld-elf.so.1: Cannot open "/usr/lib/libz.so.2" pneuma# man gcc /usr/libexec/ld-elf.so.1: Cannot open "/usr/lib/libz.so.2" pneuma# man ssh /usr/libexec/ld-elf.so.1: Cannot open "/usr/lib/libz.so.2" pneuma# man ftp /usr/libexec/ld-elf.so.1: Cannot open "/usr/lib/libz.so.2" pneuma# man date /usr/libexec/ld-elf.so.1: Cannot open "/usr/lib/libz.so.2" pneuma# exit exit Script done on Wed Apr 21 22:45:29 2004 =========================================================== 附上最近的一次dmesg纪录： Copyright (c) 1992-2003 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 4.9-RELEASE #0: Mon Oct 27 17:51:09 GMT 2003 [email protected]:/usr/obj/usr/src/sys/GENERIC Timecounter "i8254" frequency 1193182 Hz CPU: Pentium/P55C (199.96-MHz 586-class CPU) Origin = "GenuineIntel" Id = 0x543 Stepping = 3 Features=0x8001bf<FPU,VME,DE,PSE,TSC,MSR,MCE,CX8,MMX> real memory = 67108864 (65536K bytes) config> di bt0 config> di aic0 config> di aha0 config> di adv0 config> q avail memory = 59801600 (58400K bytes) Preloaded elf kernel "kernel" at 0xc0567000. Preloaded userconfig_script "/boot/kernel.conf" at 0xc056709c. Preloaded elf module "smbfs.ko" at 0xc05670ec. Preloaded elf module "libmchain.ko" at 0xc056718c. Preloaded elf module "libiconv.ko" at 0xc0567230. Intel Pentium detected, installing workaround for F00F bug netsmb_dev: loaded md0: Malloc disk npx0: <math processor> on motherboard npx0: INT 16 interface pcib0: <Host to PCI bridge> on motherboard pci0: <PCI bus> on pcib0 isab0: <AcerLabs M1533 portable PCI-ISA bridge> at device 2.0 on pci0 isa0: <ISA bus> on isab0 rl0: <RealTek 8139 10/100BaseTX> port 0xec00-0xecff mem 0xebfeff00-0xebfeffff irq 11 at device 3.0 on pci0 rl0: Ethernet address: 00:c0:26:72:6a:7d miibus0: <MII bus> on rl0 rlphy0: <RealTek internal media interface> on miibus0 rlphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto pci0: <S3 ViRGE graphics accelerator> at 6.0 irq 0 atapci0: <AcerLabs Aladdin ATA33 controller> port 0xffa0-0xffaf irq 0 at device 11.0 on pci0 ata0: at 0x1f0 irq 14 on atapci0 ata1: at 0x170 irq 15 on atapci0 orm0: <Option ROM> at iomem 0xc0000-0xc7fff on isa0 pmtimer0 on isa0 fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0 fdc0: FIFO enabled, 8 bytes threshold fd0: <1440-KB 3.5" drive> on fdc0 drive 0 atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0 atkbd0: <AT Keyboard> flags 0x1 irq 1 on atkbdc0 kbd0 at atkbd0 psm0: <PS/2 Mouse> irq 12 on atkbdc0 psm0: model IntelliMouse, device ID 3 vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 sc0: <System console> at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x300> sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0 sio0: type 16550A sio1 at port 0x2f8-0x2ff irq 3 on isa0 sio1: type 16550A ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0 ppc0: Generic chipset (EPP/NIBBLE) in COMPATIBLE mode plip0: <PLIP network interface> on ppbus0 lpt0: <Printer> on ppbus0 lpt0: Interrupt-driven port ppi0: <Parallel I/O> on ppbus0 ad0: 12893MB <ST313620A> [26197/16/63] at ata0-master UDMA33 acd0: CDROM <HITACHI CDR-7730> at ata0-slave PIO0 Mounting root from ufs:/dev/ad0s1a -- ╭──── Origin:<不良牛牧场> bbs.badcow.com.tw (210.200.247.200)─────╮ │ ↘ Welcome to SimFarm BBS -- From : [218.187.6.112] │ ╰◣◣◢ ◢◢《不良牛免费拨接→电话:40586000→帐号:zoo→密码:zoo》 ◣◣◢ ─╯