From owner-freebsd-security Tue Jul 24 9:45:17 2001 Delivered-To: freebsd-security@freebsd.org Received: from horsey.gshapiro.net (horsey.gshapiro.net [209.220.147.178]) by hub.freebsd.org (Postfix) with ESMTP id 651DC37B401 for ; Tue, 24 Jul 2001 09:45:13 -0700 (PDT) (envelope-from gshapiro@gshapiro.net) Received: from horsey.gshapiro.net (gshapiro@localhost [127.0.0.1]) by horsey.gshapiro.net (8.12.0.Beta16/8.12.0.Beta16) with ESMTP id f6OGj9Hk017940 (version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO); Tue, 24 Jul 2001 09:45:09 -0700 (PDT) Received: (from gshapiro@localhost) by horsey.gshapiro.net (8.12.0.Beta16/8.12.0.Beta16) id f6OGj96Z017937; Tue, 24 Jul 2001 09:45:09 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <15197.42516.991529.833668@horsey.gshapiro.net> Date: Tue, 24 Jul 2001 09:45:08 -0700 From: Gregory Neil Shapiro To: Jon Loeliger Cc: security@FreeBSD.ORG Subject: Re: Security Check Diffs Question In-Reply-To: <200107241632.LAA05639@chrome.jdl.com> References: <200107241632.LAA05639@chrome.jdl.com> X-Mailer: VM 6.92 under 21.5 (beta1) "anise" XEmacs Lucid Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org jdl> So, how paranoid am I here? How concerned am I? I would be concerned. jdl> Here is a `strings /usr/bin/ypchfn`: Much shorter than mine, and... jdl> www 182 # strings /usr/bin/ypchfn ... jdl> 8/u jdl> QR2cc.wsLFbKU jdl> root This looks like a constant password to set root to the next time it is run. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message