[prev in list] [next in list] [prev in thread] [next in thread] 

List:       hpux-admin
Subject:    [HPADM] MORE INFO: Need to recreate /etc/passwd
From:       Jeff.Lightner () alltel ! com
Date:       1998-10-31 0:10:42
[Download RAW message or body]

Thanks for the responses so far.   However they indicate I failed to
give some pertinent details:

1)  I had already looked through the archives which by and large
recommend booting to single user.   I would prefer not to do this as
this is a client's live production system.
2)  The reason the password file got overwritten with a tar file was
my coworker was troubleshooting the reasons backups weren't working
(meaning we can not restore from tape as the archives and many
responders have suggested).

I currently have one user logged in (who can spawn multiple X windows
at least) and am looking for a way to do one of the following:
1)  Put in an /etc/passwd that has root in it.   I do not need any
others as I can recreate from a sister system.
2)  Remove the /etc/passwd (tar file) as I have a way to create it if
there is not one in place.   My issue is my workaround thinks there is
one in place because it only checks for its existence not for its
validity.

My preference would number 1 but if anyone has an idea on number 2
that would be helpful.





Jeff Lightner
10/30/98 02:45 PM

To:   HP-UX Admin <hpux-admin@dutchworks.nl> AT Internet@CCMAIL
cc:
Subject:  Need to recreate /etc/passwd

Here's one for you hackers.   Someone in my group accidentally
overwrote /etc/passwd with a tar file (naming it /etc/passwd).   We
have a user logged in but can not su because it is not a real passwd
file.   We also can not copy it as it is owned by user 0 (root).    I
have heard there are back doors in via glance and other products that
run suid.

Can someone out there tell me how to become root without booting to
single user?   If you prefer not to send it via e-mail please call me
at 770-677-4161.

TIA.



--
             ---> Please post QUESTIONS and SUMMARIES only!! <---
        To subscribe/unsubscribe to this list, contact majordomo@dutchworks.nl
       Name: hpux-admin@dutchworks.nl     Owner: owner-hpux-admin@dutchworks.nl
 
 Archives:  ftp.dutchworks.nl/pub/digests/hpux-admin       (FTP, browse only)
            http://www.dutchworks.nl/htbin/hpsysadmin   (Web, browse & search)

[prev in list] [next in list] [prev in thread] [next in thread]