message: wtmpx /var/adm/wtmpx No such file or directory

[ponetguy2]

Hello Everyone,

I recently re-installed Solaris 9 on one of our servers. I hardened the server using Solaris Security Toolkit. I also ran rootkit. After hardening the box, I get the message below. Any ideas? Can I ignore this messages?

Nov 2 11:33:58 hostname ftpd[663]: [ID 476795 daemon.error] wtmpx /var/adm/wtmpx No such file or directory

Thank you in advance,

ponetguy2

"Not all OSs suck, it's just that some OSs suck worse than others"

 

[coffeysm]

Does that file exist? That is where old logins are stored I believe. You defintely want to have that file on your system.

 

[ponetguy2]

# cp /dev/null /var/adm/wtmpx

# last login

wtmp begins Thu Nov 2 12:13


wtmpx is not there. I recreated wtmpx, as you can see above. All seems well. I'm just a little scared to reboot

"Not all OSs suck, it's just that some OSs suck worse than others"

 

[kHz]

Look through the SST script to find the appropriate line for wtmpx and then reverse the change that it made.

I don't know what would happen if users try to login without wtmpx since it logs user information about logins and logouts.

 

[ponetguy2]

Hello kHz and coffeeysm. Thank you again for the post.

"Not all OSs suck, it's just that some OSs suck worse than others"

 

[kHz]

I have used JASS or (SST) and I have always gone through the script first because there are things I don't want it doing.

They are reversible though. It also keeps a log of what it did and makes backups of some files that it changes.

It is a useful tool.