From owner-freebsd-security Thu Nov 29 15:40:46 2001 Delivered-To: freebsd-security@freebsd.org Received: from mail.wlcg.com (mail.wlcg.com [198.92.199.5]) by hub.freebsd.org (Postfix) with ESMTP id EF85837B419 for ; Thu, 29 Nov 2001 15:40:42 -0800 (PST) Received: (from root@localhost) by mail.wlcg.com (8.11.6/8.11.6) id fATNegY56460; Thu, 29 Nov 2001 18:40:42 -0500 (EST) (envelope-from rsimmons@wlcg.com) Received: from localhost (rsimmons@localhost) by mail.wlcg.com (8.11.6/8.11.6) with ESMTP id fATNefN56453; Thu, 29 Nov 2001 18:40:41 -0500 (EST) (envelope-from rsimmons@wlcg.com) X-Authentication-Warning: mail.wlcg.com: rsimmons owned process doing -bs Date: Thu, 29 Nov 2001 18:40:36 -0500 (EST) From: Rob Simmons To: George.Giles@mcmail.vanderbilt.edu Cc: freebsd-security@freebsd.org Subject: Re: root group membership In-Reply-To: Message-ID: <20011129183907.Y47090-100000@mail.wlcg.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Virus-Scanned: by AMaViS perl-11 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org -----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 Please read the group(5) man page. You file shows that the root user is member of those other groups. If you had other users in the wheel group, you might have a problem. Robert Simmons Systems Administrator http://www.wlcg.com/ On Thu, 29 Nov 2001 George.Giles@mcmail.vanderbilt.edu wrote: > FreeBSD 4.4 release /etc/group files: > > # $FreeBSD: src/etc/group,v 1.19 1999/08/27 23:23:41 peter Exp $ > # > wheel:*:0:root > daemon:*:1:daemon > kmem:*:2:root > sys:*:3:root > tty:*:4:root > operator:*:5:root > mail:*:6: > bin:*:7: > news:*:8: > man:*:9: > games:*:13: > staff:*:20:root > guest:*:31:root > > Are root memberships here nomal, or have I been hacked ? > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE8Bsd5v8Bofna59hYRAyf1AJ9klfQCvsNoJzknYdu/Z+8HpxMcyQCfRCTt EX43FhRu7n1X/XlP67jk2MI= =vcaa -----END PGP SIGNATURE----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message