From owner-freebsd-questions Sun Oct 6 9:53:21 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 910B437B401 for ; Sun, 6 Oct 2002 09:53:19 -0700 (PDT) Received: from mail.thundernet.cz (mail.thundernet.cz [62.77.87.114]) by mx1.FreeBSD.org (Postfix) with SMTP id C9E1443E6A for ; Sun, 6 Oct 2002 09:53:17 -0700 (PDT) (envelope-from neuhauser@bellavista.cz) Received: (qmail 5796 invoked from network); 6 Oct 2002 16:53:11 -0000 Received: from unknown (HELO freepuppy.bellavista.cz) (62.168.44.50) by mail.thundernet.cz with SMTP; 6 Oct 2002 16:53:11 -0000 Received: by freepuppy.bellavista.cz (Postfix, from userid 1001) id 8D7E62FDAB2; Sun, 6 Oct 2002 18:53:09 +0200 (CEST) Date: Sun, 6 Oct 2002 18:53:09 +0200 From: Roman Neuhauser To: xxavi@MyRealBox.com Cc: freebsd-questions@FreeBSD.ORG Subject: Re: floppy disk Message-ID: <20021006165309.GF51897@freepuppy.bellavista.cz> Mail-Followup-To: xxavi@MyRealBox.com, freebsd-questions@FreeBSD.ORG References: <200210050714.g957EbuG091849@lurza.secnetix.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.1i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG # xxavi@MyRealBox.com / 2002-10-05 22:32:40 +0200: > > On 05-Oct-2002 Oliver Fromme wrote: > > Gary W. Swearingen wrote: > > > [huge quote] > > >> >> > grep: /etc/vfstab: No such file or directory > > > ... > > > > > > Anyway, I just wanted to guess that "vfstab" means "Virtual FileSystem > > > TABle", which I think is an (optional?) feature of FreeBSD 5.0 (AKA > > > > No. /etc/vfstab is the filesystem table on several SysV- > > derived UNIX systems, such as Solaris. It does not exist > > on FreeBSD. > > > > Therefore it seems that the mount command on that machine > > has been replaced by a script designed to run on a system > > like Solaris. Maybe some funny root-kit. > > > > Not that I want to cause any concern ... :-) > > > > My advice would be to re-install the mount command. Better > > yet, find out whether the machine was compromised, and if > > so, re-install the complete system. > > How can i make to reinstal only that command (mount), whitout > reinstaling all the SO? are you not concerned about the possibility that your box has been "hacked into"? anyway, check the output of: file `which mount` and if that says anything else than /sbin/mount: ELF 32-bit LSB executable, Intel 80386, version 1 (FreeBSD), statically linked, stripped particularly if it says something similar to /sbin/mount: Bourne shell script text executable then you were compromised, and reinstalling /sbin/mount won't help you. -- begin 666 nonexistent.vbs FreeBSD 4.7-RC 6:46PM up 19 days, 2:01, 17 users, load averages: 0.13, 0.11, 0.08 end To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message