Cron <root@host> chown root:root /dev/shm/prctl && chmod 4755 /dev/shm/prctl && rm -

[Supertech]

Getting this as the subject line in emails from the server...one per minute....

Cron <root@host> chown root:root /dev/shm/prctl && chmod 4755 /dev/shm/prctl && rm -rf /etc/cron.d/core && kill -USR1 17694


This didnt start until AFTER a security breach where shell was initiated by a hacker...

The actual email message reads....

chown: cannot access `/dev/shm/prctl': No such file or directory


Any idea how to get rid of this message every minute?

Also, what is the correct way to set the mail system up in WHM so I dont get all the junk mail in my inbox? Its getting sent to me becasue its 'undeliverable'

[nyjimbo]

Yes, get someone to go through your computer and clean it up and secure it.

also see this, is it what you experienced ?:

http://www.securityfocus.com/bid/18874/references

ps - Why are you called "Supertech" ?

[Supertech]

Im a Windows tech not a Linux tech....

there has to be a file somewhere telling it to do that. ??

Also, about the mail....??

[Supertech]

FIxed it my damn self....

LOL


manually created "prctl" as an empty file.

no mo errors