From owner-freebsd-questions@FreeBSD.ORG Wed Aug 18 14:17:31 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8593A16A4CE for ; Wed, 18 Aug 2004 14:17:31 +0000 (GMT) Received: from lakermmtao09.cox.net (lakermmtao09.cox.net [68.230.240.30]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0774943D49 for ; Wed, 18 Aug 2004 14:17:31 +0000 (GMT) (envelope-from jacoulter@jacoulter.net) Received: from [68.105.58.150] by lakermmtao09.cox.net (InterMail vM.6.01.03.02.01 201-2131-111-104-103-20040709) with SMTP id <20040818141730.MLJF16771.lakermmtao09.cox.net@[68.105.58.150]>; Wed, 18 Aug 2004 10:17:30 -0400 Received: by _HOSTNAME_ (sSMTP sendmail emulation); Wed, 18 Aug 2004 09:17:20 -0500 From: "James A. Coulter" Date: Wed, 18 Aug 2004 09:17:20 -0500 To: freebsd-questions@freebsd.org Message-ID: <20040818141720.GA6944@sara.mshome.net> Mail-Followup-To: freebsd-questions@freebsd.org, "Kevin D. Kinsey, DaleCo, S.P." , Jason Lieurance References: <4152.192.168.1.150.1092836489.squirrel@vipersystems.biz> <41236200.1020907@daleco.biz> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <41236200.1020907@daleco.biz> User-Agent: Mutt/1.4.2.1i cc: Jason Lieurance Subject: Re: Nightly cron message question X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Aug 2004 14:17:31 -0000 On Wed, Aug 18, 2004 at 09:04:48AM -0500, Kevin D. Kinsey, DaleCo, S.P. wrote: > Jason Lieurance wrote: > > >Hello, > > > >Late couple days on our Freebsd 4.7 email/web server I've got this message > >in the > >nightly cron jobs: > > > > > >Checking setuid files and devices: > > > >Checking for uids of 0: > >root 0 > >toor 0 > > > > > > > > You have this line: > > > # 300.chkuid0 > daily_status_security_chkuid0_enable="YES" > > set in "/etc/defaults/periodic.conf" under the > "Security Options" heading, most likely. I was under > the impression that this was set by default, as that > is the name of the directory it's in. I would be curious > as to why this wasn't happening before. > > Check the dates on said file and directory. Have > you recently run "mergemaster", perhaps? > > > >I've searched and some said it had to do with an incomplete dmesg or > >something like > >that. There are some errors: > > > > > >><>pid 82522 (libhttpd.ep), uid 65534: exited on signal 11 > >> > >> > > Something dumped core or what not, then. > > >><>but I've had those before w/o the: > >> > >>Checking for uids of 0: > >> > >>Any thoughts, thanks. > > > > Like I said, completely normal, although why they weren't > coming in before I can't guess.... > > Kevin Kinsey > DaleCo, S.P. FWIW, I also began seeing the same message in my daily cron output file as well two days ago. Jim