From owner-freebsd-security Tue Jul 28 09:53:08 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id JAA19729 for freebsd-security-outgoing; Tue, 28 Jul 1998 09:53:08 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from socrates.i-pi.com (socrates.i-pi.com [198.49.217.5]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id JAA19709 for ; Tue, 28 Jul 1998 09:53:04 -0700 (PDT) (envelope-from ingham@i-pi.com) Received: (from ingham@localhost) by socrates.i-pi.com (8.8.8/8.8.7) id KAA05237; Tue, 28 Jul 1998 10:49:58 -0600 (MDT) (envelope-from ingham) Message-ID: <19980728104957.53877@i-pi.com> Date: Tue, 28 Jul 1998 10:49:58 -0600 From: Kenneth Ingham To: security@FreeBSD.ORG Subject: date on schg files changing, how? Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.89i Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On a machine running 2.2.6 from the CD, I see the following type of thing regularly: Differences in special files: 28c28 < -r-sr-xr-x 5 root bin schg 286720 Jul 9 00:00:27 1998 /usr/sbin/sendmail --- > -r-sr-xr-x 5 root bin schg 286720 Jul 11 00:00:03 1998 /usr/sbin/sendmail This file has the schg flag, and the machine is running at securelevel 2 so nothing about this file should be able to be changed. Doing an md5 or checksum on the file says it has not actually changed, just the date. What is causing the date to change? Kenneth To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message