1.7 compromise attempt and crash?

[Igor Timkin]

> 
> Might be symlink troubles again, but this is what was in ~news/run:
> 
> 
> 
> > ls -l run
> total 1
> srwxrwxr-x   1 news     news           0 May 12 21:37 control
> srwxrwxrwx   1 root     news           0 May 12 05:43 ctlinndaacmEa
> srwxrwxrwx   1 news     news           0 May 12 03:15 ctlinndaawEva
> -rw-rw-r--   1 news     news           5 May 12 21:38 innd.pid
> srwxrwxr-x   1 news     news           0 May 12 21:37 nntpin
> > date
> Fri May 12 21:47:19 CDT 2000
> 
> > rm run/ctlinndaa*
> 
> 
> I don't know why there would be a zero-length setuid root file 
> in there.

``s'' mean socket link, don't setuid root.