Date: Wed, 17 Dec 1997 13:43:36 +1100 (EDT) From: Darren Reed <avalon@coombs.anu.edu.au> To: dhawk@river.org (David Hawkins) Cc: freebsd-security@FreeBSD.ORG Subject: Re: Is this something to worry about? Message-ID: <199712170245.SAA27242@hub.freebsd.org> In-Reply-To: <199712170051.QAA14100@ohio.river.org> from "David Hawkins" at Dec 16, 97 04:51:08 pm
next in thread | previous in thread | raw e-mail | index | archive | help
In some mail from David Hawkins, sie said: > > Background: today I did a make and install in /usr/ports/x11/XFree86 > and XFree86-contrib and I thought I hadn't touched /usr/bin > but noticed this later in the day: > > -r-xr-xr-x 1 bin bin 123 Dec 6 07:02 linux > -r-xr-xr-x 1 bin bin 122 Dec 6 07:02 qcam > -r-xr-xr-x 1 bin bin 16384 Dec 16 05:00 tail > -r-xr-xr-x 1 bin bin 126976 Dec 16 10:55 awk > -r-xr-xr-x 1 bin bin 12288 Dec 16 11:35 du > > That the last three files there were modified today. I'm not aware of > anything on the system that would have modified 'tail' at 5am. You haven't used something like "file(1)" on them or some other program that changes the inode using utimes, have you ?
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199712170245.SAA27242>