Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 8 Aug 1998 22:24:04 -0500 (CDT)
From:      Joel Ray Holveck <joelh@gnu.org>
To:        brett@lariat.org
Cc:        dima@best.net, dg@root.com, roberto@keltia.freenix.fr, FreeBSD-security@FreeBSD.ORG, hackers@FreeBSD.ORG
Subject:   Re: Does this mean we have another breakin?
Message-ID:  <199808090324.WAA18897@detlev.UUCP>
In-Reply-To: <199808080641.AAA16434@lariat.lariat.org> (message from Brett Glass on Sat, 08 Aug 1998 00:40:49 -0600)
References:  <199808080135.SAA00798@implode.root.com> <199808080641.AAA16434@lariat.lariat.org>

next in thread | previous in thread | raw e-mail | index | archive | help
>> We usually get this bug once in two weeks. But since file by itself
>> stays the same and machine doesn't crash, fixing/finding the problem
>> wasn't in out TODO list.
> The MD5 of the file stayed the same, and diff reveals no change. But
> we can't turn off the alarm that's triggered by the date change in
> /usr/sbin without potentially missing breakins, so our two new admins 
> are constantly getting scary messages.

grep out what you're ignoring?

Happy hacking,
joelh

-- 
Joel Ray Holveck - joelh@gnu.org - http://www.wp.com/piquan
   Fourth law of programming:
   Anything that can go wrong wi
sendmail: segmentation violation - core dumped

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199808090324.WAA18897>