Date: Tue, 09 Mar 1999 10:05:35 +0700 (ICT) From: pirat@center.oaep.go.th (Pirat Sriyotha) To: questions@FreeBSD.ORG Subject: security check Message-ID: <XFMail.990309100535.pirat@center.oaep.go.th>
next in thread | raw e-mail | index | archive | help
hi, i do not understand the security check for daily run out put. for example my machine produce 'security check output' as follow =====begin===== Date: Tue, 9 Mar 1999 02:00:28 +0700 (ICT) From: Charlie Root <root> Subject: prime security check output checking setuid files and devices: prime setuid diffs: 6c6 < -r-xr-sr-x 2 root tty 212992 Feb 4 20:12:32 1999 /sbin/dump --- > -r-xr-sr-x 2 root tty 249856 Nov 30 12:20:43 1998 /sbin/dump 8,9c8,9 < -r-xr-sr-x 2 root tty 212992 Feb 4 20:12:32 1999 /sbin/rdump < -r-xr-sr-x 2 root tty 229376 Feb 4 20:12:50 1999 /sbin/restore --- > -r-xr-sr-x 2 root tty 249856 Nov 30 12:20:43 1998 /sbin/rdump > -r-xr-sr-x 2 root tty 270336 Nov 30 12:20:50 1998 /sbin/restore 11c11 < -r-xr-sr-x 2 root tty 229376 Feb 4 20:12:50 1999 /sbin/rrestore --- > -r-xr-sr-x 2 root tty 270336 Nov 30 12:20:50 1998 /sbin/rrestore 76c76 < -r-sr-xr-- 1 root network 208896 Feb 4 20:18:15 1999 /usr/sbin/ppp --- > -r-sr-xr-- 1 root network 212992 Nov 30 12:14:21 1998 /usr/sbin/ppp =====end===== i just wonder why the files size and time stamp, like /usr/sbin/ppp, is changed. the current one is -r-sr-xr-- 1 root network 212992 Nov 30 12:14 ppp can this be a result of badguy doing something on my machine ? many thanks in advance with regards, psr ---------------------------------- E-Mail: Pirat SRIYOTHA <pirat@center.oaep.go.th> Date: 09-Mar-99 Time: 10:04:16 This message was sent by XFMail ---------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?XFMail.990309100535.pirat>