Date: Wed, 12 Mar 2003 13:25:00 -0500 (EST) From: Dru <dlavigne6@cogeco.ca> To: Volker Kindermann <freebsd@secspace.de> Cc: questions@FreeBSD.ORG Subject: Re: sfs UID 71 Message-ID: <20030312132316.C89419@dhcp-17-14.kico2.on.cogeco.ca> In-Reply-To: <20030312172732.05c139e3.freebsd@secspace.de> References: <20030311184600.G89419@dhcp-17-14.kico2.on.cogeco.ca> <20030312172732.05c139e3.freebsd@secspace.de>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 12 Mar 2003, Volker Kindermann wrote: > Hi Dru, > > > > I was reading my daily output on a 4.7-RELEASE and noticed the > > following user was created: > > > > > sfs:*:71: > > > > as well as the following groups: > > > > < nogroup:*:65533: > > < nobody:*:65534: > > < sfs:*:71: > > IMHO sfs has nothing to do with tripwire. A quick search on google > showed a software sfs (networking file system). Have a look here: > > http://www.ugcs.caltech.edu/info/sfs/sfs_toc.html I know, that's all I could find myself. So, I have no clue why that user/groups showed up out of the blue. I was sorta hoping it had something to do with tripwire... Anyone heard of any exploits that create the above? Dru To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030312132316.C89419>