Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 28 Jan 1996 15:44:57 -0600 (CST)
From:      "Mike Pritchard" <mpp@mpp.minn.net>
To:        dhawk@netcom.com (David H)
Cc:        bugs@freebsd.org
Subject:   Re: Not Exactly a Bug, but a Crack
Message-ID:  <199601282144.PAA02088@mpp.minn.net>
In-Reply-To: <199601272046.MAA28965@netcom13.netcom.com> from "David H" at Jan 27, 96 12:46:07 pm

next in thread | previous in thread | raw e-mail | index | archive | help
David H wrote:
> 
> On Wednesday, the day before, the security script reported that my
> /usr/sbin/sendmail had been replaced. It was still suid-root and now
> setgid kmem. My cd-rom drive on the machine is broken, so I haven't
> been able to replace it yet.

Sendmail is normally installed mode 6555, owner root, group kmem.
I have no idea what it needs kmem access for.

Your security script probably detected a bug that has been around for 
some time.  For some reason, the modification time of some binaries 
will get updated, even though the binary never changed in any way.
-- 
Mike Pritchard
mpp@minn.net
"Go that way.  Really fast.  If something gets in your way, turn"



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199601282144.PAA02088>