Path: utzoo!attcan!uunet!apexepa!orac!pat
From: pat@orac.pgh.pa.us (Pat Barron)
Newsgroups: comp.unix.ultrix
Subject: Re: SYSTEM logins weird
Message-ID: <206@orac.pgh.pa.us>
Date: 13 Jan 90 08:44:44 GMT
References: <9527@batcomputer.tn.cornell.edu> <9533@batcomputer.tn.cornell.edu>
Reply-To: pat@orac.pgh.pa.us (Pat Barron)
Organization: Pat's 3b1
Lines: 17

In article <9533@batcomputer.tn.cornell.edu> hurf@tcgould.tn.cornell.edu (Hurf Sheldon) writes:
>	Posting my own followup:
>	I found that /etc/gettytab had been
>	rewritten with the top 3690 bytes of /etc/passwd - this
>	is the second time under Ultrix3.1 on 2 different systems
>	this has happened - ?????

I've seen this a lot, too.  I've always suspected that it had something
to do with the fact that /etc/gettytab is edited in /etc/rc or rc.local
(to put the current system version string into the default login banner)
but have never been able to prove anything....

--Pat.
-- 
Pat Barron
Internet:  pat@orac.pgh.pa.us  - or -   orac!pat@gateway.sei.cmu.edu
UUCP:  ...!uunet!apexepa!sei!orac!pat  - or -  ...!pitt!darth!orac!pat