<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#ffffff" text="#000000"> James Wilkinson wrote: <blockquote cite="mid20060909204207.GA7069@aprilcottage.co.uk" type="cite"> <pre wrap="">Aaron Gray wrote: </pre> <blockquote type="cite"> <pre wrap="">Just logged in to be told my account had terminated within 10 seconds. Root is okay but new accounts terminate. Oh. Logging in from remote over SSH they are fine. The only things that I have done recently is to change the SELinux permissions to Permissive from disabled and back again. Oh and install ies4Linux in root but that should not effect anything. Oh. and failsafe mode logs into the account okay. </pre> </blockquote> <pre wrap=""> I'm not familiar with ies4Linux -- from where did you get it, and how does it install? (Is there an install script, an RPM, or do you just un-tar it?) </pre> </blockquote> Its an install script that installs MS Internet Explorer on Wine for a single user. <a href="http://www.tatanka.com.br/ies4linux/index-en.html">http://www.tatanka.com.br/ies4linux/index-en.html</a> I seriously doubt whether it was the culprit. <blockquote cite="mid20060909204207.GA7069@aprilcottage.co.uk" type="cite"> <pre wrap=""> Then there's always rpm -Va, possibly piped through grep (e.g. rpm -Va | grep -E ^..5 to show all files with a modified md5sum) to see which files have been modified on the system. Hope this helps, </pre> </blockquote> Thanks, thats a useful command sequence :) Nothing strikingly obvious though. I have ISPConfig ( A web and email configuration program) installed too which is the most likely cuprit for altering these files. I'll check through them tomorrow. <pre>S.5....T. c /etc/ppp/chap-secrets S.5....T. c /etc/ppp/pap-secrets S.5....T. c /etc/postfix/main.cf S.5....T. c /usr/lib/sasl2/smtpd.conf SM5....T. c /etc/sysconfig/iptables-config S.5....T. c /etc/syslog.conf ..5....T. c /etc/sysconfig/system-config-users ..5....T. c /etc/inittab S.5....T. c /etc/sysconfig/named S.5....T. c /root/.bashrc S.5....T. c /etc/httpd/conf/httpd.conf S.5....T. /etc/sgml/docbook-slides.cat S.5....T. c /etc/sysconfig/kdump S.5....T. c /etc/httpd/conf.d/php.conf ..5....T. /usr/share/eclipse/configuration/org.eclipse.update/last.config.stamp S.5....T. /usr/share/eclipse/configuration/org.eclipse.update/platform.xml S.5....T. /usr/share/eclipse/features/org.eclipse.sdk_3.1.2/feature.xml S.5....T. c /etc/sysconfig/system-config-securitylevel S.5....T. c /etc/printcap S.5....T. c /etc/xml/catalog S.5....T. c /usr/share/sgml/docbook/xmlcatalog S.5....T. c /usr/share/a2ps/afm/fonts.map S.5....T. /etc/sgml/docbook-simple.cat S.5....T. /usr/share/texmf-var/web2c/latex.fmt S.5....T. /usr/share/texmf-var/web2c/pdflatex.fmt S.5....T. c /etc/cups/cupsd.conf S.5....TC c /etc/cups/mime.types S.5....TC c /usr/lib/security/classpath.security S.5....T. c /var/log/mail/statistics S.5....T. c /etc/sane.d/dll.conf S.5....T. c /etc/ftpusers S.5....T. c /etc/proftpd.conf ..5....T. /usr/bin/rsvg S.5....T. /usr/bin/rsvg-convert S.5....T. /usr/bin/rsvg-view S.5....T. /usr/lib/gtk-2.0/2.4.0/engines/libsvg.so S.5....T. /usr/lib/gtk-2.0/2.4.0/loaders/svg_loader.so Whole list :- </pre> <pre>S.5....T. c /etc/ppp/chap-secrets S.5....T. c /etc/ppp/pap-secrets S.5....T. c /etc/postfix/main.cf S.5....T. c /usr/lib/sasl2/smtpd.conf SM5....T. c /etc/sysconfig/iptables-config S.5....T. c /etc/syslog.conf ..5....T. c /etc/sysconfig/system-config-users ..5....T. c /etc/inittab S.5....T. c /etc/sysconfig/named S.5....T. c /root/.bashrc S.5....TC /usr/share/texmf-var/fonts/map/dvipdfm/updmap/dvipdfm_dl14.map S.5....TC /usr/share/texmf-var/fonts/map/dvipdfm/updmap/dvipdfm_ndl14.map S.5....TC /usr/share/texmf-var/fonts/map/pdftex/updmap/pdftex_dl14.map S.5....TC /usr/share/texmf-var/fonts/map/pdftex/updmap/pdftex_ndl14.map S.5....T. /usr/share/texmf-var/web2c/aleph.fmt S.5....T. /usr/share/texmf-var/web2c/amstex.fmt S.5....T. /usr/share/texmf-var/web2c/bamstex.fmt S.5....T. /usr/share/texmf-var/web2c/bplain.fmt S.5....T. /usr/share/texmf-var/web2c/cont-en.fmt S.5....T. /usr/share/texmf-var/web2c/etex.fmt S.5....T. /usr/share/texmf-var/web2c/lambda.fmt S.5....T. /usr/share/texmf-var/web2c/lamed.fmt ..5....T. /usr/share/texmf-var/web2c/metafun.mem S.5....T. /usr/share/texmf-var/web2c/mf.base ..5....T. /usr/share/texmf-var/web2c/mpost.mem S.5....T. /usr/share/texmf-var/web2c/mptopdf.fmt S.5....T. /usr/share/texmf-var/web2c/omega.fmt S.5....T. /usr/share/texmf-var/web2c/pdfetex.fmt S.5....T. /usr/share/texmf-var/web2c/pdftex.fmt S.5....T. /usr/share/texmf-var/web2c/tex.fmt S.5....T. c /etc/httpd/conf/httpd.conf S.5....T. /etc/sgml/docbook-slides.cat S.5....TC /usr/share/texmf-var/fonts/map/dvips/updmap/builtin35.map S.5....TC /usr/share/texmf-var/fonts/map/dvips/updmap/download35.map S.5....TC /usr/share/texmf-var/fonts/map/dvips/updmap/ps2pk.map S.5....TC /usr/share/texmf-var/fonts/map/dvips/updmap/psfonts_pk.map S.5....TC /usr/share/texmf-var/fonts/map/dvips/updmap/psfonts_t1.map S.5....T. c /etc/sysconfig/kdump S.5....T. c /etc/httpd/conf.d/php.conf ..5....T. /usr/share/eclipse/configuration/org.eclipse.update/last.config.stamp S.5....T. /usr/share/eclipse/configuration/org.eclipse.update/platform.xml S.5....T. /usr/share/eclipse/features/org.eclipse.sdk_3.1.2/feature.xml S.5....T. c /etc/sysconfig/system-config-securitylevel S.5....T. c /etc/printcap S.5....T. c /etc/xml/catalog S.5....T. c /usr/share/sgml/docbook/xmlcatalog S.5....T. c /usr/share/a2ps/afm/fonts.map S.5....T. /etc/sgml/docbook-simple.cat S.5....T. /usr/share/texmf-var/web2c/latex.fmt S.5....T. /usr/share/texmf-var/web2c/pdflatex.fmt S.5....T. c /etc/cups/cupsd.conf S.5....TC c /etc/cups/mime.types S.5....TC c /usr/lib/security/classpath.security S.5....T. c /var/log/mail/statistics S.5....T. c /etc/sane.d/dll.conf S.5....T. c /etc/ftpusers S.5....T. c /etc/proftpd.conf ..5....T. /usr/bin/rsvg S.5....T. /usr/bin/rsvg-convert S.5....T. /usr/bin/rsvg-view S.5....T. /usr/lib/gtk-2.0/2.4.0/engines/libsvg.so S.5....T. /usr/lib/gtk-2.0/2.4.0/loaders/svg_loader.so </pre> Many thanks for the suggestion. I wish I had known about it before and had backups of these files. Aaron </body> </html>