Date: Wed, 19 Aug 1998 12:14:13 -0700 (PDT) From: Doug White <dwhite@resnet.uoregon.edu> To: Alex Weeks <awfbsd@ilinkusa.net> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: setuid diffs and ssh Message-ID: <Pine.BSF.4.00.9808191213170.27190-100000@resnet.uoregon.edu> In-Reply-To: <004b01bdcb7f$0ce10300$1a4bdacd@puttputt.ilinkusa.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 19 Aug 1998, Alex Weeks wrote: > I know setuid changes are often asked about but I couldn't find anything in > the archives similar to this. > > This morning my security output shows that ssh was removed and ssh1 was > inserted. The only difference appears to be in the date. Interestingly ssh > is linked to ssh1 now. Did you upgrade ssh on your machine? The one you had was quite old and potentially insecure. > checking setuid files and devices: > > > Noname setuid diffs: > 128c128 > < -rws--x--x 1 root bin 139264 Dec 8 12:15:40 1997 > /usr/local/bin/ssh > --- > > -rws--x--x 1 root bin 1056757 Aug 17 21:57:12 1998 > /usr/local/bin/ssh1 > > > checking for uids of 0: > root 0 > toor 0 > > ----------End Output---------------- > > AND > > ---------Output------------------------ > lrwxrwxrwx 1 root bin 4 Aug 17 21:57 ssh -> ssh1 > lrwxrwxrwx 1 root bin 8 Aug 17 21:57 ssh-add -> ssh-add1 > -rwxr-xr-x 1 root bin 604863 Aug 17 21:57 ssh-add1 > lrwxrwxrwx 1 root bin 10 Aug 17 21:57 ssh-agent -> ssh-agent1 > -rwxr-xr-x 1 root bin 611523 Aug 17 21:57 ssh-agent1 > lrwxrwxrwx 1 root bin 12 Aug 17 21:57 ssh-askpass -> ssh-askpass1 > -rwxr-xr-x 1 root bin 67306 Aug 17 21:57 ssh-askpass1 > lrwxrwxrwx 1 root bin 11 Aug 17 21:57 ssh-keygen -> ssh-keygen1 > -rwxr-xr-x 1 root bin 580637 Aug 17 21:57 ssh-keygen1 > -rws--x--x 1 root bin 1056757 Aug 17 21:57 ssh1 This is normal for newer installations of ssh. Doug White | University of Oregon Internet: dwhite@resnet.uoregon.edu | Residence Networking Assistant http://gladstone.uoregon.edu/~dwhite | Computer Science Major To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.00.9808191213170.27190-100000>