Machine fake rebooting

Tyler Aviss tjaviss-Re5JQEeQqe8AvxtiuMwx3w at public.gmane.org
Mon Mar 1 17:26:52 UTC 2010


My home box has been acting oddly lately, seemingly in relation to my
running instance of asterisk.
Today when I'm SSH'ed into the box, it will randomly act like I've
told it to reboot

Broadcast message from root at mydomain
	(unknown) at 18:38 ...

The system is going down for reboot NOW!
Connection to mydomain.com closed by remote host.
Connection to mydomain.com closed.

Now the machine doesn't actually reboot, and the logs don't mention it
at all, it just drops my SSH connection and I have to reconnect.

It might be a coincidence but it seems to have happened since I've
been messing with my asterisk stuff. I'm wondering if something else
might be causing it or if the box may be compromised. I'm not sure
why/how that may have happened since the only recent changes are to
asterisk - which AFAIK doesn't have any recent
shell-execution/escalation bugs -  and I haven't had any suspicious
SSH attempts.

- TJA
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists





More information about the Legacy mailing list