Date: Wed, 19 Aug 1998 09:38:36 -0500 From: "Alex Weeks" <awfbsd@ilinkusa.net> To: <freebsd-questions@FreeBSD.ORG> Subject: setuid diffs and ssh Message-ID: <004b01bdcb7f$0ce10300$1a4bdacd@puttputt.ilinkusa.net>
next in thread | raw e-mail | index | archive | help
I know setuid changes are often asked about but I couldn't find anything in the archives similar to this. This morning my security output shows that ssh was removed and ssh1 was inserted. The only difference appears to be in the date. Interestingly ssh is linked to ssh1 now. -----------Output------------------------- checking setuid files and devices: Noname setuid diffs: 128c128 < -rws--x--x 1 root bin 139264 Dec 8 12:15:40 1997 /usr/local/bin/ssh --- > -rws--x--x 1 root bin 1056757 Aug 17 21:57:12 1998 /usr/local/bin/ssh1 checking for uids of 0: root 0 toor 0 ----------End Output---------------- AND ---------Output------------------------ lrwxrwxrwx 1 root bin 4 Aug 17 21:57 ssh -> ssh1 lrwxrwxrwx 1 root bin 8 Aug 17 21:57 ssh-add -> ssh-add1 -rwxr-xr-x 1 root bin 604863 Aug 17 21:57 ssh-add1 lrwxrwxrwx 1 root bin 10 Aug 17 21:57 ssh-agent -> ssh-agent1 -rwxr-xr-x 1 root bin 611523 Aug 17 21:57 ssh-agent1 lrwxrwxrwx 1 root bin 12 Aug 17 21:57 ssh-askpass -> ssh-askpass1 -rwxr-xr-x 1 root bin 67306 Aug 17 21:57 ssh-askpass1 lrwxrwxrwx 1 root bin 11 Aug 17 21:57 ssh-keygen -> ssh-keygen1 -rwxr-xr-x 1 root bin 580637 Aug 17 21:57 ssh-keygen1 -rws--x--x 1 root bin 1056757 Aug 17 21:57 ssh1 ----------End Output----------------- No recent installations of anything here. Anyone have an idea what could cause this to happen? Do I have something to worry about? Thanks for the help Alex Weeks aweeks@ilinkusa.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?004b01bdcb7f$0ce10300$1a4bdacd>