Date: Mon, 2 Apr 2001 23:08:29 -0500 (CDT) From: James Wyatt <jwyatt@rwsystems.net> To: Mikhail Kruk <meshko@cs.brandeis.edu> Cc: security@freebsd.org Subject: Re: odd setuid diffs Message-ID: <Pine.BSF.4.10.10104022307410.69271-100000@bsdie.rwsystems.net> In-Reply-To: <Pine.LNX.4.30.0104022345360.2864-100000@calliope.cs.brandeis.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
They were all across the DST change barrier last year and the year before. We are just past the DST barrier this year. - Jy@ On Tue, 3 Apr 2001, Mikhail Kruk wrote: > Date: Tue, 3 Apr 2001 00:00:18 -0400 (EDT) > From: Mikhail Kruk <meshko@cs.brandeis.edu> > To: security@freebsd.org > Subject: odd setuid diffs > > I got very strange (IMHO) setuid diffs in my security reports today... Any > explanations appreciated: > > xxxx.xxxx.xxx setuid diffs: > 69c69 > < 1698870 -rwsr-xr-x 1 root wheel 219148 Jul 19 16:20:56 2000 > /usr/local/bin/screen-3.9.5 > --- > > 1698870 -rwsr-xr-x 1 root wheel 219148 Jul 19 17:20:56 2000 > /usr/local/bin/screen-3.9.5 > 71c71 > < 1230184 -rwsr-xr-x 1 root bin 264148 Jun 3 22:19:08 1999 > /usr/local/sbin/hfaxd > --- > > 1230184 -rwsr-xr-x 1 root bin 264148 Jun 3 23:19:08 1999 > /usr/local/sbin/hfaxd > > They are off by one hour, all right. I see possible cause: yesterday I've > noticed that my time was set to EST instead of EDT and changed my > timezone (one hour difference). But the question is: why those two files, > not the rest of them?? What do they have in common? > > (Running 4.3-BETA FreeBSD 4.3-BETA #11: Fri Mar 9 03:36:40 EST 2001) > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.10.10104022307410.69271-100000>