Re: user name from security logs

From: Dave Patterson (sdpatt2_at_gmail.com)
Date: 05/31/05

  • Next message: Dave C: "Re: aretzj.exe -- reappearing unknown system file" 
    Date: Tue, 31 May 2005 06:47:50 +0700
To: security-basics@securityfocus.com

    > here's my question: Is there anyway to change the admin password
    > and/or get the machine's control back? If not, Do i have to backup
    > and reinstall linux on every box?
    >
    You need to redefine your root.
    hit shift at the boot prompt and enter
    boot: Linux init=/bin/sh
    then do:
    # mount -n -t remount,rw /
    # mount -avt nonfs,noproc,nosmbfs
    # cd /etc
    # vi passwd
    # vi shadow

    if the second data field in /etc/passwd is x,
    then you need to edit the second data field in the passwd file so that
    it becomes empty. Then you can reboot and login to root without a password. 

    -- 
Regards, Dave
Dare to be naive.
		-- R. Buckminster Fuller

  • Next message: Dave C: "Re: aretzj.exe -- reappearing unknown system file"