Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 2 Jul 2010 12:48:50 +0100
From:      Mike Clarke <jmc-freebsd2@milibyte.co.uk>
To:        freebsd-questions@freebsd.org
Subject:   /usr/sbin/periodic security check changing date format
Message-ID:  <201007021248.50672.jmc-freebsd2@milibyte.co.uk>

next in thread | raw e-mail | index | archive | help
The daily security check run by /usr/sbin/periodic has started to change 
the date format when checking suid files with the result that all the 
files are flagged as changed.

On Wednesday I had the following ...

curlew.lan setuid diffs:
--- /var/log/setuid.today       2010-06-06 09:01:14.000000000 +0100
+++ /tmp/security.6Np9Q7Bn      2010-06-30 11:30:48.000000000 +0100
@@ -1,70 +1,70 @@
- 164937 -r-sr-xr-x  1 root    wheel         18560 Jun  1 18:34:35 
2010 /bin/rcp

[snip]

+ 164937 -r-sr-xr-x  1 root    wheel         18560  1 Jun 18:34:35 
2010 /bin/rcp

Anacron wasn't running yesterday so the next report was today when it 
switched back from "day month" to "month day"...

curlew.lan setuid diffs:
--- /var/log/setuid.today       2010-06-30 11:30:48.000000000 +0100
+++ /tmp/security.Y7M72oUL      2010-07-02 00:08:44.000000000 +0100
@@ -1,70 +1,70 @@
- 164937 -r-sr-xr-x  1 root    wheel         18560  1 Jun 18:34:35 
2010 /bin/rcp

[snip]

+ 164937 -r-sr-xr-x  1 root    wheel         18560 Jun  1 18:34:35 
2010 /bin/rcp

And I'm sure I haven't made any changes to the system in the last few 
days which might cause this format change.

-- 
Mike Clarke



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201007021248.50672.jmc-freebsd2>