Date: Sat, 19 Sep 1998 12:52:48 +1000 (EST) From: Carey Nairn <cpn@dpac.tas.gov.au> To: questions@FreeBSD.ORG Subject: daily security check Message-ID: <Pine.BSF.3.96.980919124652.886H-100000@jumpgate.cpn.org.au>
next in thread | raw e-mail | index | archive | help
Hi, I have a question regarding the daily security check: last night I got the following report: checking setuid files and devices: whitestar setuid diffs: 46c46 < -r-sr-xr-x 5 root bin 286720 Sep 15 18:44:12 1998 /usr/bin/hoststat --- > -r-sr-xr-x 5 root bin 286720 Sep 18 20:27:50 1998 /usr/bin/hoststat 55c55 < -r-sr-xr-x 5 root bin 286720 Sep 15 18:44:12 1998 /usr/bin/mailq --- > -r-sr-xr-x 5 root bin 286720 Sep 18 20:27:50 1998 /usr/bin/mailq 58c58 < -r-sr-xr-x 5 root bin 286720 Sep 15 18:44:12 1998 /usr/bin/newaliases --- > -r-sr-xr-x 5 root bin 286720 Sep 18 20:27:50 1998 /usr/bin/newaliases 118,119c118,119 < -r-sr-xr-x 5 root bin 286720 Sep 15 18:44:12 1998 /usr/sbin/purgestat < -r-sr-xr-x 5 root bin 286720 Sep 15 18:44:12 1998 /usr/sbin/sendmail --- > -r-sr-xr-x 5 root bin 286720 Sep 18 20:27:50 1998 /usr/sbin/purgestat > -r-sr-xr-x 5 root bin 286720 Sep 18 20:27:50 1998 /usr/sbin/sendmail checking for uids of 0: root 0 toor 0 I have compared the files listed with the ones on the 2.2.7 live filesystem CD and they are the same. What would cause the timestamp changes on these files? This also happened on Sep 15 (as you can see from the previous timestamps). Prior to that, the files had the same timestamps as the ones on the CD. thanks, Carey Nairn To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.980919124652.886H-100000>