Date: Tue, 28 Jul 1998 22:00:18 +0000 From: Niall Smart <rotel@indigo.ie> To: Kenneth Ingham <ingham@i-pi.com>, security@FreeBSD.ORG Subject: Re: date on schg files changing, how? Message-ID: <199807282100.WAA01034@indigo.ie> In-Reply-To: <19980728104957.53877@i-pi.com>; Kenneth Ingham <ingham@i-pi.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Jul 28, 10:49am, Kenneth Ingham wrote: } Subject: date on schg files changing, how? > On a machine running 2.2.6 from the CD, I see the following type of > thing regularly: > > Differences in special files: > 28c28 > < -r-sr-xr-x 5 root bin schg 286720 Jul 9 00:00:27 1998 /usr/sbin/sendmail > --- > > -r-sr-xr-x 5 root bin schg 286720 Jul 11 00:00:03 1998 /usr/sbin/sendmail > > This file has the schg flag, and the machine is running at securelevel > 2 so nothing about this file should be able to be changed. > Doing an md5 or checksum on the file says it has not actually > changed, just the date. Kenneth, I think I have seen this before, it is rumored to be a bug in the FS code which causes random date changes on files. Can anyone confirm or deny this? Niall -- Niall Smart, rotel@indigo.ie. Amaze your friends and annoy your enemies: echo '#define if(x) if (!(x))' >> /usr/include/stdio.h To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199807282100.WAA01034>