Date: Sun, 21 May 2000 15:09:06 -0700 From: "Khairuddin Abdul Ghani" <abdulgha@usc.edu> To: <cjclark@home.com> Cc: <freebsd-questions@FreeBSD.ORG> Subject: Re: mysterious shutdowns Message-ID: <011801bfc371$2e5582e0$6f1f7d80@phoenix> References: <00b401bfc354$31b72aa0$6f1f7d80@phoenix> <20000521175026.I96573@cc942873-a.ewndsr1.nj.home.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Actually, I don't have accounting running, and I've already temporarily removed the shutdown command. At the moment, only operator and kmem are part of the operator group. Although I think its somehow done remotely. ----- Original Message ----- From: "Crist J. Clark" <cjc@cc942873-a.ewndsr1.nj.home.com> To: "Khairuddin Abdul Ghani" <abdulgha@usc.edu> Cc: <freebsd-questions@FreeBSD.ORG> Sent: Sunday, May 21, 2000 2:50 PM Subject: Re: mysterious shutdowns > You wouldn't happen to have accounting running? Then you could see > what user executed the command (and see all the commands all users > have been doing too). Do you have the default permissions on > /sbin/shutdown? > > -r-sr-x--- 1 root operator 151728 Feb 7 03:00 /sbin/shutdown > > Are any of your users in group operator? > -- > Crist J. Clark cjclark@home.com > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?011801bfc371$2e5582e0$6f1f7d80>