From owner-freebsd-questions Thu Sep 5 3:51:24 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A523E37B400 for ; Thu, 5 Sep 2002 03:51:21 -0700 (PDT) Received: from michelob.wixb.com (michelob.wixb.com [67.36.82.132]) by mx1.FreeBSD.org (Postfix) with ESMTP id 33D4243E6E for ; Thu, 5 Sep 2002 03:51:21 -0700 (PDT) (envelope-from lists@xpec.com) Received: from labatts.xpec.com (labatts.wixb.com [10.135.144.4]) by michelob.wixb.com (8.12.6/8.12.6) with ESMTP id g85ApK9f015542 for ; Thu, 5 Sep 2002 05:51:20 -0500 (CDT) Message-Id: <5.1.1.6.2.20020905055017.00b4d338@molson.wixb.com> Date: Thu, 05 Sep 2002 05:51:16 -0500 To: freebsd-questions@freebsd.org From: "J.D. Bronson" Subject: security run question.. Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG I noticed this in my daily security run. Is a user trying to do something bad here? > Sep 5 05:21:20 molson -zsh: /etc/pwd.db: Permission denied > Sep 5 05:21:25 molson ls: /etc/pwd.db: Permission denied > Sep 5 05:21:43 molson ls: /etc/pwd.db: Permission denied > Sep 5 05:23:11 molson -zsh: /etc/pwd.db: Permission denied > Sep 5 05:23:14 molson mutt: /etc/pwd.db: Permission denied > Sep 5 05:23:51 molson mutt: /etc/pwd.db: Permission denied > Sep 5 05:24:34 molson vi: /etc/pwd.db: Permission denied > Sep 5 05:24:45 molson sendmail[999]: NOQUEUE: SYSERR(UID110): /etc/mail/sendmail.cf: line 0: cannot open: Permission denied > Sep 5 05:25:04 molson mutt: /etc/pwd.db: Permission denied > Sep 5 08:01:00 molson uustat: /etc/pwd.db: Permission denied -- J.D. Bronson Aurora Health Care // Information Systems // Milwaukee, WI USA Office: 414.978.8282 // Fax: 414.328.8282 // Pager: 414.603.8282 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message