Re: Root password changed

["james" <jamesh () cybermesa com>]

Check the history files for root and anyone who can su/sudo to root. If someone fat fingered
roots account it will show here; if a hack then the history file may not be wiped.

james


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com