Date: Fri, 23 Jul 2004 10:00:05 -0500 From: Dan Nelson <dnelson@allantgroup.com> To: Steve Bertrand <iaccounts@ibctech.ca> Cc: freebsd-questions@freebsd.org Subject: Re: setuid diffs... Message-ID: <20040723150005.GC3234@dan.emsphone.com> In-Reply-To: <1557.209.167.16.15.1090593146.squirrel@209.167.16.15> References: <1557.209.167.16.15.1090593146.squirrel@209.167.16.15>
next in thread | previous in thread | raw e-mail | index | archive | help
In the last episode (Jul 23), Steve Bertrand said: > Late yesterday, I ``cloned'' my single, primary IDE FreeBSD hard disk > onto a larger one. Then, using a Promise ATA IDE RAID controller I > built a RAID-1 array. > > Everything went as planned, the box is now back up using the 'ar' > driver for the array. However, in the security run output last night, > I got this: > > Checking setuid files and devices: > > pearl.ibctech.ca setuid diffs: > 1,73c1,73 > < 106 -r-sr-xr-x 1 root wheel 251444 Jul 16 12:07:10 2004 /bin/rcp > < 15904 -r-xr-sr-x 1 root kmem 66216 Jul 16 12:07:25 2004 /sbin/ccdconfig > < 15949 -r-sr-xr-x 1 root wheel 203992 Jul 16 12:07:28 2004 /sbin/ping > > and down further: > > > 1036 -r-sr-xr-x 1 root wheel 251444 Jul 16 12:07:10 2004 /bin/rcp > > 1292 -r-xr-sr-x 1 root kmem 66216 Jul 16 12:07:25 2004 /sbin/ccdconfig > > 1339 -r-sr-xr-x 1 root wheel 203992 Jul 16 12:07:28 2004 /sbin/ping It looks like the only difference is the inode number, which is reasonable since you copied the files to a new disk. -- Dan Nelson dnelson@allantgroup.com
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040723150005.GC3234>