From owner-freebsd-security Sun Jan 28 13:18:20 1996 Return-Path: owner-security Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id NAA01705 for security-outgoing; Sun, 28 Jan 1996 13:18:20 -0800 (PST) Received: from iaehv.IAEhv.nl (root@iaehv.IAEhv.nl [192.87.208.2]) by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id NAA01700 for ; Sun, 28 Jan 1996 13:18:17 -0800 (PST) Received: from oasis.IAEhv.nl by iaehv.IAEhv.nl (8.6.12/1.63) id WAA07058; Sun, 28 Jan 1996 22:17:40 +0100 X-Disclaimer: iaehv.nl is a public access UNIX system and cannot be held responsible for the opinions of its individual users. Received: by oasis.IAEhv.nl (8.6.12/1.63) id WAA00571; Sun, 28 Jan 1996 22:16:19 +0100 From: volf@oasis.IAEhv.nl (Frank Volf) Message-Id: <199601282116.WAA00571@oasis.IAEhv.nl> Subject: Re: Temporary passwd files in /etc? To: taob@io.org (Brian Tao) Date: Sun, 28 Jan 1996 22:16:18 +0100 (MET) Cc: freebsd-security@freebsd.org In-Reply-To: from "Brian Tao" at Jan 28, 96 01:07:03 pm X-Mailer: ELM [version 2.4 PL25] Content-Type: text Sender: owner-security@freebsd.org Precedence: bulk Brian Tao wrote: > > I found these two files lying around in the /etc directory of one > of our FreeBSD 2.1.0-RELEASE machines here. > > -rw-r--r-- 1 root wheel 459403 Jan 20 15:35 pw.007939.orig > -rw-rw-rw- 1 root wheel 612563 Jan 25 19:06 pw.021282~ > > pw.021282~ is a world readable/writeable copy of the master.passwd > file. How did either of those files get there? Do the serial numbers > on them look familiar to anyone (pids?). Hi, We had a similar problem. These files are backup files created by the the joe editor. There is a bug in some versions of this editor, that creates the backup files with the wrong permissions. We solved the problem by installing version 2.8 of joe. This, however does not prevent creating the backup files, they just have the correct permissions. If you don't want these files at all, you need to turn off the backup option of joe for root. Regards, Frank ---------------------------------------------------------------------------- Frank Volf - Internet Access Eindhoven - Digitale Stad Eindhoven ---------------------------------------------------------------------------- || volf@oasis.IAEhv.nl - use for personal mail || || volf@IAEhv.nl - use for Internet Access Eindhoven related mail || || volf@dse.dse.nl - use for Digital City of Eindhoven related mail || ---------------------------------------------------------------------------- IAE Public Access Unix System - Dial +31.40.2439436 and login as new. ----------------------------------------------------------------------------