From owner-freebsd-security Mon Dec 22 07:30:06 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id HAA29017 for security-outgoing; Mon, 22 Dec 1997 07:30:06 -0800 (PST) (envelope-from owner-freebsd-security) Received: from passer.osg.gov.bc.ca (passer.osg.gov.bc.ca [142.32.110.29]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id HAA28976 for ; Mon, 22 Dec 1997 07:30:00 -0800 (PST) (envelope-from cy@cschuber.net.gov.bc.ca) Received: (from uucp@localhost) by passer.osg.gov.bc.ca (8.8.8/8.6.10) id HAA13219; Mon, 22 Dec 1997 07:29:47 -0800 (PST) Received: from cschuber.net.gov.bc.ca(142.31.240.113), claiming to be "cwsys.cwsent.com" via SMTP by passer.osg.gov.bc.ca, id smtpdaavlia; Mon Dec 22 07:29:39 1997 Received: (from uucp@localhost) by cwsys.cwsent.com (8.8.8/8.6.10) id HAA01093; Mon, 22 Dec 1997 07:29:31 -0800 (PST) Message-Id: <199712221529.HAA01093@cwsys.cwsent.com> Received: from localhost.cwsent.com(127.0.0.1), claiming to be "cwsys" via SMTP by localhost.cwsent.com, id smtpd001083; Mon Dec 22 15:28:37 1997 X-Mailer: exmh version 2.0zeta 7/24/97 Reply-to: Cy Schubert - ITSD Open Systems Group From: Cy Schubert - ITSD Open Systems Group X-Sender: cy To: "John S. Dyson" cc: mike@smith.net.au (Mike Smith), dhawk@river.org, freebsd-security@freebsd.org Subject: Re: Is this something to worry about? In-reply-to: Your message of "Tue, 16 Dec 1997 22:38:16 EST." <199712170338.WAA01537@dyson.iquest.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Mon, 22 Dec 1997 07:28:36 -0800 Sender: owner-freebsd-security@freebsd.org X-Loop: FreeBSD.org Precedence: bulk Sorry for the lateness of this reply. I just got around to reading the messages from the various mailing lists I've subscribed to. I get this behavior consistently under 2.2.2 when running restore. If I restore a file I can repeat this 100% of the time. Another way to repeat this 100% of the time is to use GDB and set a breakpoint in a program. My questions are, is this a VM fix or a PROCFS fix? Do you feel comfortable enough with the fix to have this merged into -stable by the time that 2.2.6 is released? > Mike Smith said: > > > Background: today I did a make and install in /usr/ports/x11/XFree86 > > > and XFree86-contrib and I thought I hadn't touched /usr/bin > > > but noticed this later in the day: > > > > > > -r-xr-xr-x 1 bin bin 123 Dec 6 07:02 linux > > > -r-xr-xr-x 1 bin bin 122 Dec 6 07:02 qcam > > > -r-xr-xr-x 1 bin bin 16384 Dec 16 05:00 tail > > > -r-xr-xr-x 1 bin bin 126976 Dec 16 10:55 awk > > > -r-xr-xr-x 1 bin bin 12288 Dec 16 11:35 du > > > > > > That the last three files there were modified today. I'm not aware of > > > anything on the system that would have modified 'tail' at 5am. > > > > This is a "feature" of the system; occasionally executables appear to > > be written to while they're running. Nobody has been able to work out > > why; the write doesn't appear to change any of the actual contents of > > the file. > > > I think that it has been fixed in the 3.0 line of code. Let me know if there > is ANY of this happening on -current! > > -- > John | Never try to teach a pig to sing, > dyson@freebsd.org | it just makes you look stupid, and > jdyson@nc.com | it irritates the pig. > Regards, Phone: (250)387-8437 Cy Schubert Fax: (250)387-5766 UNIX Support OV/VM: BCSC02(CSCHUBER) ITSD BITNET: CSCHUBER@BCSC02.BITNET Government of BC Internet: cschuber@uumail.gov.bc.ca Cy.Schubert@gems8.gov.bc.ca "Quit spooling around, JES do it."