fedora 8 hacked?

[Michael D. Setzer II]

> Hello,
> I used fedora 8 with ssh and sendmail port open only. OS has the
> latest update with selinux enforced.
> sendmail is the latest 8.14.2.
>
> my machine was mounted as rw for directory "/", it works fine for a
> while for sending out emails.
> then I find the machine was changed to mount as read only for
> directory "/". I cannot create any files in the directory / including
> /tmp, nor can I send out emails of course. it complains the file
> system is read-only. running "mount" command shows the machine is
> mounted as "rw".  I checked no more log files modified any more under
> /var/log directory. reboot the machine, the problem is gone.
>
> any possible the machine got hacked or is there a way to check what
> caused this problem?
>

>From my understanding, the system boots and mounts the drive in ro mode to
check it, and then should remount it in rw mode. Something seemed to fail
for some reason. I would recommend restarting the system with a force file
system check.
shutdown -r -F now

That will do a reboot, and run a full filesystem scan on the reboot. It
will hopefully go thru with no problems, but might prompt you to login
with the root password, and the run e2fsck on the drive for a more
complete scan.

Others might give a more complete answer.

> thanks in advance.
>
> --
> fedora-list mailing list
> fedora-list at redhat.com
> To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
>