Date: Sat, 8 Aug 1998 22:24:04 -0500 (CDT) From: Joel Ray Holveck <joelh@gnu.org> To: brett@lariat.org Cc: dima@best.net, dg@root.com, roberto@keltia.freenix.fr, FreeBSD-security@FreeBSD.ORG, hackers@FreeBSD.ORG Subject: Re: Does this mean we have another breakin? Message-ID: <199808090324.WAA18897@detlev.UUCP> In-Reply-To: <199808080641.AAA16434@lariat.lariat.org> (message from Brett Glass on Sat, 08 Aug 1998 00:40:49 -0600) References: <199808080135.SAA00798@implode.root.com> <199808080641.AAA16434@lariat.lariat.org>
next in thread | previous in thread | raw e-mail | index | archive | help
>> We usually get this bug once in two weeks. But since file by itself >> stays the same and machine doesn't crash, fixing/finding the problem >> wasn't in out TODO list. > The MD5 of the file stayed the same, and diff reveals no change. But > we can't turn off the alarm that's triggered by the date change in > /usr/sbin without potentially missing breakins, so our two new admins > are constantly getting scary messages. grep out what you're ignoring? Happy hacking, joelh -- Joel Ray Holveck - joelh@gnu.org - http://www.wp.com/piquan Fourth law of programming: Anything that can go wrong wi sendmail: segmentation violation - core dumped To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199808090324.WAA18897>