Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I got a pc and a special application installed on it, the OS is FC4 and we don't have root password I tried several random passwords and after 3 times I realized that something fishy is happening behind the scene then I boot up with rescue disk and checked the hard disk and realized some files missed(deleted) and /etc/passwd values had changed.

so my question is, is it possible to change the way of authenticating linux?

P.S : I found an extra entry inside /etc/rc.sysinit which will lead to run 23 extra services but none of them is involved in changing /etc/passwd values after typing 3 wrong passwords in a row (or at least I couldn't find any clue).

share|improve this question

You got 0wn3d... the only safe way out is to disconnect from the network, rescue any important data (preferrably using a LiveCD or a rescue CD), and install from scratch. The rescued data has to be considered highly suspect until carefully scrutinized for fishy goings on.

If FC4 means Fedora Core 4, that is long past end of life. Can't you update? If updating yearly is a problem, consider CentOS.

share|improve this answer
I really want to know how can I do such thing?and which files are responsible for authenticating? – austin powers Apr 5 '13 at 18:31

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .