Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 19 Oct 2001 11:51:02 +1000
From:      Edwin Groothuis <edwin@mavetju.org>
To:        Scott Gerhardt <scott@gerhardt-it.com>
Cc:        FreeBSD <freebsd-questions@FreeBSD.ORG>
Subject:   Re: Setuid Log - Is this normal
Message-ID:  <20011019115102.A552@k7.mavetju.org>
In-Reply-To: <KPEMLBLEMPMHGLJOCDEGKEGACKAA.scott@gerhardt-it.com>; from scott@gerhardt-it.com on Thu, Oct 18, 2001 at 07:53:50PM -0600
References:  <KPEMLBLEMPMHGLJOCDEGKEGACKAA.scott@gerhardt-it.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Oct 18, 2001 at 07:53:50PM -0600, Scott Gerhardt wrote:
> Running FreeBSD 4.4-Release with a custom kernel.  It is a new install (10
> days old).
> I'm new to FreeBSD so I have nothing to compare this with:
> 
> I have 63 entries in my /var/log/setuid.today.  All entries are dated Sept
> 18, 2001 between 11:25 and 11:30.
> 
> Is this ok or are these entries something to be concerned about?

These are the compiled binaries shipped when you installed the 4.4 version.
I have them too:

  48 -r-xr-sr-x  1 root  operator   59388 Sep 19 03:25:35 2001 /bin/df
  60 -r-sr-xr-x  1 root  wheel     319688 Sep 19 03:33:25 2001 /bin/rcp
 339 -r-xr-sr-x  1 root  kmem       63316 Sep 19 03:27:35 2001 /sbin/ccdconfig
  68 -r-xr-sr-x  2 root  tty       332300 Sep 19 03:34:04 2001 /sbin/dump
 382 -r-sr-xr-x  1 root  wheel     198340 Sep 19 03:27:45 2001 /sbin/ping
 383 -r-sr-xr-x  1 root  bin       198068 Sep 19 03:27:45 2001 /sbin/ping6
  68 -r-xr-sr-x  2 root  tty       332300 Sep 19 03:34:04 2001 /sbin/rdump
 388 -r-sr-xr-x  1 root  wheel     195800 Sep 19 03:27:46 2001 /sbin/route
 393 -r-sr-x---  1 root  operator  166304 Sep 19 03:27:47 2001 /sbin/shutdown
[...]

Edwin

-- 
Edwin Groothuis   |              Personal website: http://www.MavEtJu.org
edwin@mavetju.org |           Interested in MUDs? Visit Fatal Dimensions:
------------------+                       http://www.FatalDimensions.org/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011019115102.A552>