Date: Wed, 22 Jul 1998 10:35:51 -0600 From: Brett Glass <brett@lariat.org> To: "Jordan K. Hubbard" <jkh@time.cdrom.com> Cc: ben@rosengart.com, Jim Shankland <jas@flyingfox.com>, ahd@kew.com, leec@adam.adonai.net, security@FreeBSD.ORG Subject: Re: hacked and don't know why Message-ID: <199807221635.KAA06020@lariat.lariat.org> In-Reply-To: <14690.901124597@time.cdrom.com> References: <Your message of "Wed, 22 Jul 1998 08:53:47 MDT." <199807221453.IAA03997@lariat.lariat.org>
next in thread | previous in thread | raw e-mail | index | archive | help
At 09:23 AM 7/22/98 -0700, Jordan K. Hubbard wrote: >But tou have no idea as to whether or not this was directly due to the >attack or to the hacker's subsequent parading around as root. Well, even someone parading around as root wouldn't have much purpose in changing the ownership of files to User 30005 (no ID) or in changing the group ownership to random gid's. Very obvious and not good for hacking. Also, the ownership changed to strange things when OTHERS touched their files. There was definitely a malfunction on the system level. --Brett To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199807221635.KAA06020>