From owner-freebsd-questions@FreeBSD.ORG Fri Jul 2 11:48:55 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 974261065670 for ; Fri, 2 Jul 2010 11:48:55 +0000 (UTC) (envelope-from jmc-freebsd2@milibyte.co.uk) Received: from relay.ptn-ipout02.plus.net (relay.ptn-ipout02.plus.net [212.159.7.36]) by mx1.freebsd.org (Postfix) with ESMTP id 34FA08FC1C for ; Fri, 2 Jul 2010 11:48:54 +0000 (UTC) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AjcFAM5uLUzUnw4R/2dsb2JhbACTMIwxcb4ahSQEj0s Received: from outmx02.plus.net ([212.159.14.17]) by relay.ptn-ipout02.plus.net with ESMTP; 02 Jul 2010 12:48:53 +0100 Received: from helix.plus.com ([84.92.153.232] helo=curlew.milibyte.co.uk) by outmx02.plus.net with esmtp (Exim) id 1OUejj-0003zz-5u for freebsd-questions@freebsd.org; Fri, 02 Jul 2010 12:48:51 +0100 Received: by curlew.milibyte.co.uk with local (Exim 4.71) (envelope-from ) id 1OUeji-0003cG-QT for freebsd-questions@freebsd.org; Fri, 02 Jul 2010 12:48:50 +0100 From: Mike Clarke To: freebsd-questions@freebsd.org Date: Fri, 2 Jul 2010 12:48:50 +0100 User-Agent: KMail/1.9.10 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <201007021248.50672.jmc-freebsd2@milibyte.co.uk> X-SA-Exim-Connect-IP: X-SA-Exim-Mail-From: jmc-freebsd2@milibyte.co.uk X-SA-Exim-Scanned: No (on curlew.milibyte.co.uk); SAEximRunCond expanded to false Subject: /usr/sbin/periodic security check changing date format X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Jul 2010 11:48:55 -0000 The daily security check run by /usr/sbin/periodic has started to change the date format when checking suid files with the result that all the files are flagged as changed. On Wednesday I had the following ... curlew.lan setuid diffs: --- /var/log/setuid.today 2010-06-06 09:01:14.000000000 +0100 +++ /tmp/security.6Np9Q7Bn 2010-06-30 11:30:48.000000000 +0100 @@ -1,70 +1,70 @@ - 164937 -r-sr-xr-x 1 root wheel 18560 Jun 1 18:34:35 2010 /bin/rcp [snip] + 164937 -r-sr-xr-x 1 root wheel 18560 1 Jun 18:34:35 2010 /bin/rcp Anacron wasn't running yesterday so the next report was today when it switched back from "day month" to "month day"... curlew.lan setuid diffs: --- /var/log/setuid.today 2010-06-30 11:30:48.000000000 +0100 +++ /tmp/security.Y7M72oUL 2010-07-02 00:08:44.000000000 +0100 @@ -1,70 +1,70 @@ - 164937 -r-sr-xr-x 1 root wheel 18560 1 Jun 18:34:35 2010 /bin/rcp [snip] + 164937 -r-sr-xr-x 1 root wheel 18560 Jun 1 18:34:35 2010 /bin/rcp And I'm sure I haven't made any changes to the system in the last few days which might cause this format change. -- Mike Clarke