From owner-freebsd-security@FreeBSD.ORG Sun Sep 7 14:03:58 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5DEEC16A4BF for ; Sun, 7 Sep 2003 14:03:58 -0700 (PDT) Received: from ran.psg.com (ip166.usw12.rb1.bel.nwlink.com [209.20.253.166]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6116643FE1 for ; Sun, 7 Sep 2003 14:03:57 -0700 (PDT) (envelope-from randy@psg.com) Received: from localhost ([127.0.0.1] helo=ran.psg.com) by ran.psg.com with esmtp (Exim 4.22) id 19w6hP-000LPn-0I; Sun, 07 Sep 2003 14:03:55 -0700 From: Randy Bush MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Date: Sun, 7 Sep 2003 14:03:54 -0700 To: Mike Tancsa References: <20030907203633.GA35241@x-anthony.com> <5.2.0.9.0.20030907170253.0993d6a0@209.112.4.2> Message-Id: cc: freebsd-security@freebsd.org Subject: Re: @LongLink X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Sep 2003 21:03:58 -0000 >>> what does 'file' tell you? >>>> what the heck is >>>> # ls -li /usr/\@LongLink >>>> 3 ---------- 1 root wheel 111 Jan 1 1970 /usr/@LongLink >> @LongLink: ASCII text, with no line terminators >> what disturbs me is the inode number > What does > find / -inum 3 -ls > show it linked to ? but it does not make me more clueful # find / -inum 3 -ls 3 36 drwxr-xr-x 3 root wheel 18432 Sep 2 01:18 /dev 3 4 -rw-r--r-- 1 root wheel 802 Apr 3 08:55 /root/.cshrc 3 4 ---------- 1 root wheel 111 Jan 1 1970 /usr/@LongLink 3 4 drwxrwxrwx 2 uucp uucp 512 Apr 3 08:51 /var/spool/uucppublic 3 4 dr-xr-xr-x 2 root wheel 512 Apr 3 08:51 /var/empty 3 0 lr--r--r-- 1 root wheel 3 Sep 7 21:02 /proc/curproc -> 441 3 4 drwxrwxrwt 2 root wheel 512 Sep 2 02:59 /tmp/.X11-unix it's the only inode 3 on /usr randy