[K12OSN] Mysterious server reboot

Doug Simpson veewee77 at alltel.net
Thu Mar 24 15:11:11 UTC 2005


One of the clients selected "REBOOT" instead of logoff.

DS


Henry Burroughs wrote:

> Right after my class this morning while I was working on the server, 
> all the clients in my room went gray screen, and then I noticed a 
> broadcast message from root saying the server is going down for a 
> reboot NOW!.
>
> The problem with this:  I did not issue a reboot for the server.  The 
> server has been up for over 60 days with no problems.  It is a K12LTSP 
> 4.1.1 server.  I've run chkrootkit now and nothing has shown up, as 
> well as "rpm -Va"  I've got a number of S & 5 files, but most of them 
> are stuff that I've installed/modified or .so files...
>
> I am at a loss at the moment.  The server is internal only, there are 
> no outside direct connections to it.  Either I've been hacked or some 
> student has found a way to reboot the server.
>
> Help would be greatly appreciated!!!
>
> Henry
>
>------------------------------------------------------------------------
>
>_______________________________________________
>K12OSN mailing list
>K12OSN at redhat.com
>https://www.redhat.com/mailman/listinfo/k12osn
>For more info see <http://www.k12os.org>
>





More information about the K12OSN mailing list