Date: Wed, 5 Aug 1998 23:47:00 +0200 From: Ollivier Robert <roberto@keltia.freenix.fr> To: security@FreeBSD.ORG Subject: Re: Does this mean we have another breakin? Message-ID: <19980805234700.A23220@keltia.freenix.fr> In-Reply-To: <199808051643.KAA04281@lariat.lariat.org>; from Brett Glass on Wed, Aug 05, 1998 at 10:27:30AM -0600 References: <199808051643.KAA04281@lariat.lariat.org>
next in thread | previous in thread | raw e-mail | index | archive | help
According to Brett Glass: > setuid diffs: > 9c9 > < -r-xr-sr-x 2 root tty 225280 Jul 22 02:13:13 1998 /sbin/restore > --- > > -r-xr-sr-x 2 root tty 225280 Aug 4 15:00:14 1998 /sbin/restore Verify, if you have them, the MD5 checksums. If they don't have changed, you've been hit by a VM bug where mod. time is changed even if the executable has only been loaded. -- Ollivier ROBERT -=- FreeBSD: The Power to Serve! -=- roberto@keltia.freenix.fr FreeBSD keltia.freenix.fr 3.0-CURRENT #62: Mon Jul 27 20:47:08 CEST 1998 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19980805234700.A23220>