possible compromise or just misreading logs

[Jez Hancock]

On Sun, Dec 07, 2003 at 09:14:56AM -0800, Craig Riter wrote:
> It was the only file listed and I didn't remember changing anything on my pc
> having to do with the screensaver and can't even remember for sure if I was
> on my computer at that time.
Try:

ls -l /var/db/pkg

and see if any ports were modified at that time.  

You can also use 'last' to check if you were logged in around that time.

-- 
Jez Hancock
 - System Administrator / PHP Developer

http://munk.nu/