From owner-freebsd-security Tue Jul 28 14:06:18 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id OAA15004 for freebsd-security-outgoing; Tue, 28 Jul 1998 14:06:18 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from indigo.ie (nsmart@ts02-119.dublin.indigo.ie [194.125.134.249]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id OAA14928 for ; Tue, 28 Jul 1998 14:06:00 -0700 (PDT) (envelope-from rotel@indigo.ie) Received: (from nsmart@localhost) by indigo.ie (8.8.8/8.8.7) id WAA01034; Tue, 28 Jul 1998 22:00:19 +0100 (IST) (envelope-from rotel@indigo.ie) From: Niall Smart Message-Id: <199807282100.WAA01034@indigo.ie> Date: Tue, 28 Jul 1998 22:00:18 +0000 In-Reply-To: <19980728104957.53877@i-pi.com>; Kenneth Ingham Reply-To: rotel@indigo.ie X-Files: The truth is out there X-Mailer: Mail User's Shell (7.2.6 beta(3) 11/17/96) To: Kenneth Ingham , security@FreeBSD.ORG Subject: Re: date on schg files changing, how? Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Jul 28, 10:49am, Kenneth Ingham wrote: } Subject: date on schg files changing, how? > On a machine running 2.2.6 from the CD, I see the following type of > thing regularly: > > Differences in special files: > 28c28 > < -r-sr-xr-x 5 root bin schg 286720 Jul 9 00:00:27 1998 /usr/sbin/sendmail > --- > > -r-sr-xr-x 5 root bin schg 286720 Jul 11 00:00:03 1998 /usr/sbin/sendmail > > This file has the schg flag, and the machine is running at securelevel > 2 so nothing about this file should be able to be changed. > Doing an md5 or checksum on the file says it has not actually > changed, just the date. Kenneth, I think I have seen this before, it is rumored to be a bug in the FS code which causes random date changes on files. Can anyone confirm or deny this? Niall -- Niall Smart, rotel@indigo.ie. Amaze your friends and annoy your enemies: echo '#define if(x) if (!(x))' >> /usr/include/stdio.h To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message