From owner-freebsd-security Mon Apr 2 21:11:13 2001 Delivered-To: freebsd-security@freebsd.org Received: from bsdie.rwsystems.net (bsdie.rwsystems.net [209.197.223.2]) by hub.freebsd.org (Postfix) with ESMTP id 7139D37B71E for ; Mon, 2 Apr 2001 21:11:10 -0700 (PDT) (envelope-from jwyatt@rwsystems.net) Received: from bsdie.rwsystems.net([209.197.223.2]) (1928 bytes) by bsdie.rwsystems.net via sendmail with P:esmtp/R:bind_hosts/T:inet_zone_bind_smtp (sender: ) id for ; Mon, 2 Apr 2001 23:08:30 -0500 (CDT) (Smail-3.2.0.111 2000-Feb-17 #1 built 2000-Jun-25) Date: Mon, 2 Apr 2001 23:08:29 -0500 (CDT) From: James Wyatt To: Mikhail Kruk Cc: security@freebsd.org Subject: Re: odd setuid diffs In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org They were all across the DST change barrier last year and the year before. We are just past the DST barrier this year. - Jy@ On Tue, 3 Apr 2001, Mikhail Kruk wrote: > Date: Tue, 3 Apr 2001 00:00:18 -0400 (EDT) > From: Mikhail Kruk > To: security@freebsd.org > Subject: odd setuid diffs > > I got very strange (IMHO) setuid diffs in my security reports today... Any > explanations appreciated: > > xxxx.xxxx.xxx setuid diffs: > 69c69 > < 1698870 -rwsr-xr-x 1 root wheel 219148 Jul 19 16:20:56 2000 > /usr/local/bin/screen-3.9.5 > --- > > 1698870 -rwsr-xr-x 1 root wheel 219148 Jul 19 17:20:56 2000 > /usr/local/bin/screen-3.9.5 > 71c71 > < 1230184 -rwsr-xr-x 1 root bin 264148 Jun 3 22:19:08 1999 > /usr/local/sbin/hfaxd > --- > > 1230184 -rwsr-xr-x 1 root bin 264148 Jun 3 23:19:08 1999 > /usr/local/sbin/hfaxd > > They are off by one hour, all right. I see possible cause: yesterday I've > noticed that my time was set to EST instead of EDT and changed my > timezone (one hour difference). But the question is: why those two files, > not the rest of them?? What do they have in common? > > (Running 4.3-BETA FreeBSD 4.3-BETA #11: Fri Mar 9 03:36:40 EST 2001) > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message