Re: System attacked, need help
"Carlos E. R." <[email protected]>
| Newsgroups | gmane.linux.suse.security |
|---|---|
| Message-ID | <[email protected]> |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2014-09-13 20:28, Jon Cosby wrote: > On 2014-09-13 11:21, Carlos E. R. wrote: > Thanks. What about the universal permissions on ifdown? It is a symlink. *ALL* symlinks have universal permissions. The real permissions are those of the link target. > > sbin> ls -l ifdown lrwxrwxrwx 1 root root 4 Sep 12 18:05 ifdown -> > ifup > > And again, there’s a long signal going out when I come back from > suspension. I'm assuming it's coming from ifup. What's a "signal"? What do you mean? When the machine awakes, it has to restart the network. Details differ depending on what network setup you use, but if it is "automatic", ie, dhcp, it certainly has to probe for a lease (new or renewed). And if it is wireless, it has to restart it, check what access points are available, choose one, and attempt to connect... Nothing strange there. And there may be other activities, like clock sync, mail check, browswers awakening and checking things, apper checking... You would have to setup another machine with a sniffer to find out exactly what network packages are goin in/out. - -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlQUkEYACgkQtTMYHG2NR9Uw9QCfbKAIx1eZm+0PQF4HEnv2CP43 G+4An0+UGFclMsmqp/3nasrAqz556TMi =RRZt -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: [email protected] To contact the owner, e-mail: [email protected]