[linux-help] Re: can't log in as root and don't know why :(

[Jeff Vian <jvian10@xxxxxxxxxxx>]

Moonraker wrote:
> 
> I don't know what happened today but when I got home from work my system
> was sitting at the login screen and will no longer let me login as root.
> I haven't changed the password recently and it is also one that I am
> used to using. I have tried several times to make sure I wasn't making
> typo's or anything like that also. I do have to admit that I am still
> trying to learn linux and have really done nothing to this system yet
> except install dns2go and insert my personal homepage. I am using Red
> Hat linux v.7 and must admit that I really don't know much about what I
> am doing when it comes to linux. If you need any more info let me know
> and I will do my best to get it for you.
> 
> thanks for the help,
> John E. Moon
> 
> -- This is the linux-help@xxxxxxxxx list.  To unsubscribe,
> visit http://www.complete.org/cgi-bin/listargate-aclug.cgi

RH 7 has some known vulnerabilities. I got hacked and someone installed
a root kit on mine about 2 years ago.  I had the same symptom, and the
only way I got in was to boot to single user.  Then the passwd program
would not fix it because the login prog had been replaced with a trojan.

Since then I have been running newer versions (currently RH 7.2) and
have been running 
ipchains, port sentry, and tripwire with good results.  I also keep up
to date with the patches for known vulnerabilities and monitor it for
any hack attempts.

If this is your problem, I suggest a new clean install with the newer
version and configure the firewalling/monitoring before you reattach to
the internet.
-- This is the linux-help@xxxxxxxxx list.  To unsubscribe,
visit http://www.complete.org/cgi-bin/listargate-aclug.cgi