Date: Fri, 7 Aug 1998 12:20:35 +0200 From: Ollivier Robert <roberto@keltia.freenix.fr> To: FreeBSD-security@FreeBSD.ORG Subject: Re: Does this mean we have another breakin? Message-ID: <19980807122035.A4145@keltia.freenix.fr> In-Reply-To: <o1zqteasq.fsf@mew.gol.com>; from Just Another Perl Hacker on Fri, Aug 07, 1998 at 12:21:57PM %2B0900 References: <199808051643.KAA04281@lariat.lariat.org> <19980805234700.A23220@keltia.freenix.fr> <o90l2bshu.fsf@mew.gol.com> <19980806131045.A28059@keltia.freenix.fr> <o1zqteasq.fsf@mew.gol.com>
next in thread | previous in thread | raw e-mail | index | archive | help
According to Just Another Perl Hacker: > I assume that this spontaneous writebacks *could* occur not only to > setuid(2)'d executables such as sendmail(8), but to arbitrary command > as a file on the filesystem. Of course but unless you run Tripwire, the /etc/security script will detect changes only on setuid/setgid ones. -- Ollivier ROBERT -=- FreeBSD: The Power to Serve! -=- roberto@keltia.freenix.fr FreeBSD keltia.freenix.fr 3.0-CURRENT #62: Mon Jul 27 20:47:08 CEST 1998 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19980807122035.A4145>