[ILUG] /dev/tty
cnb at eircom.net
cnb at eircom.net
Thu Jan 31 20:50:15 GMT 2002
When looking for dodgy directories I came across this:
crw-rw---- 1 root disk 12, 5 Mar 24 2001 tpqic24
crw-rw-rw- 1 root root 5, 0 Mar 24 2001 tty
-rw------- 1 root root 146882020 Jan 31 20:43 tty*
crw--w---- 1 root root 4, 0 Mar 24 2001 tty0
crw------- 1 root root 4, 1 Jan 30 20:59 tty1
crw--w---- 1 root tty 4, 10 Mar 24 2001 tty10
crw--w---- 1 root tty 4, 11 Mar 24 2001 tty11
crw--w---- 1 root tty 4, 12 Mar 24 2001 tty12
crw--w---- 1 root tty 4, 13 Mar 24 2001 tty13
crw--w---- 1 root tty 4, 14 Mar 24 2001 tty14
crw--w---- 1 root tty 4, 15 Mar 24 2001 tty15
Just in case it is normal what looked odd to me was the 3rd line:
-rw------- 1 root root 146882020 Jan 31 20:43 tty*
The time seems to correspond on with the time that I ran the find command.
Anybody know whats going on here or is this a rootkit of some kind?
Gracias
More information about the ILUG
mailing list