From owner-freebsd-hackers Fri Mar 1 10:15:05 1996 Return-Path: owner-hackers Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id KAA28666 for hackers-outgoing; Fri, 1 Mar 1996 10:15:05 -0800 (PST) Received: from inet-gw-0.ey.ca (inet-gw-0.EY.CA [132.220.23.1]) by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id KAA28641 for ; Fri, 1 Mar 1996 10:14:51 -0800 (PST) Received: from sobeco.sobeco.com (server-001.EY.CA [132.220.12.5]) by inet-gw-0.ey.ca (8.6.12/8.6.12) with SMTP id NAA09209 for ; Fri, 1 Mar 1996 13:14:43 -0500 Received: by sobeco.sobeco.com(5.65+/IDA-1.3.5) id AA04520; Fri, 1 Mar 96 13:14:13 -0500 From: "s.millions" Message-Id: <9603011814.AA04520@sobeco.sobeco.com> Subject: Gremlins changing [cm]time on files? To: hackers@FreeBSD.org Date: Fri, 1 Mar 96 13:14:12 EST Reply-To: stacy@ey.ca Sender: owner-hackers@FreeBSD.org Precedence: bulk Hi, I am running "tripwire" on FBSD 2.1.0-Release system and I have had a strange problem crop up a couple of times now (it's been running for ~35 days now) The ctime and mtime of some files are changing. It has happened twice now. I am fairly confident that there was no one on the machine both times that it happened. There was no modification to the data (the file sizes didn't change and the file signatures did not change). The files in question are /usr/sbin/sendmail and /usr/local/etc/in.nnrpd Any suggestions? -stacy -- "I will finish what I st..." stacy@ey.ca - Bart Simpson