From owner-freebsd-questions Wed Aug 19 07:42:10 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id HAA21433 for freebsd-questions-outgoing; Wed, 19 Aug 1998 07:42:10 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from Aqua.IntelliLink.net (aqua.intellilink.net [205.218.75.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id HAA21426 for ; Wed, 19 Aug 1998 07:42:08 -0700 (PDT) (envelope-from awfbsd@ilinkusa.net) Received: from puttputt ([205.218.75.26]) by Aqua.IntelliLink.net (8.8.8/8.8.8) with SMTP id JAA28702 for ; Wed, 19 Aug 1998 09:37:41 -0500 (CDT) (envelope-from awfbsd@ilinkusa.net) Message-ID: <004b01bdcb7f$0ce10300$1a4bdacd@puttputt.ilinkusa.net> From: "Alex Weeks" To: Subject: setuid diffs and ssh Date: Wed, 19 Aug 1998 09:38:36 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.3110.1 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I know setuid changes are often asked about but I couldn't find anything in the archives similar to this. This morning my security output shows that ssh was removed and ssh1 was inserted. The only difference appears to be in the date. Interestingly ssh is linked to ssh1 now. -----------Output------------------------- checking setuid files and devices: Noname setuid diffs: 128c128 < -rws--x--x 1 root bin 139264 Dec 8 12:15:40 1997 /usr/local/bin/ssh --- > -rws--x--x 1 root bin 1056757 Aug 17 21:57:12 1998 /usr/local/bin/ssh1 checking for uids of 0: root 0 toor 0 ----------End Output---------------- AND ---------Output------------------------ lrwxrwxrwx 1 root bin 4 Aug 17 21:57 ssh -> ssh1 lrwxrwxrwx 1 root bin 8 Aug 17 21:57 ssh-add -> ssh-add1 -rwxr-xr-x 1 root bin 604863 Aug 17 21:57 ssh-add1 lrwxrwxrwx 1 root bin 10 Aug 17 21:57 ssh-agent -> ssh-agent1 -rwxr-xr-x 1 root bin 611523 Aug 17 21:57 ssh-agent1 lrwxrwxrwx 1 root bin 12 Aug 17 21:57 ssh-askpass -> ssh-askpass1 -rwxr-xr-x 1 root bin 67306 Aug 17 21:57 ssh-askpass1 lrwxrwxrwx 1 root bin 11 Aug 17 21:57 ssh-keygen -> ssh-keygen1 -rwxr-xr-x 1 root bin 580637 Aug 17 21:57 ssh-keygen1 -rws--x--x 1 root bin 1056757 Aug 17 21:57 ssh1 ----------End Output----------------- No recent installations of anything here. Anyone have an idea what could cause this to happen? Do I have something to worry about? Thanks for the help Alex Weeks aweeks@ilinkusa.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message