Date: Mon, 10 Aug 1998 12:13:57 +0200 (CEST) From: Michael Elbel <Michael.Elbel@consol.de> To: security@FreeBSD.ORG Subject: Re: Does this mean we have another breakin? Message-ID: <199808101013.MAA09930@fourier.int.consol.de> References: <199808080403.VAA05702@burka.rdy.com>
next in thread | previous in thread | raw e-mail | index | archive | help
In lists.freebsd.security you write: >David Greenman writes: [...] >> Corruption is probably not the right word. There might be a bug where a >> page is seen as modified when it isn't, causing the modify date to get >> updated. The only way to be certain is to compare the binary with your >> backup (e.g. if installed from CDROM, then with the copy on the CDROM). I >> haven't personally seen this happen in more than a year, so if the bug is >> still there, it must be fairly rare. >We usually get this bug once in two weeks. But since file by itself >stays the same and machine doesn't crash, fixing/finding the problem >wasn't in out TODO list. Same here. I've seen it twice in the last four weeks on one of two absolutely identical machines we use as firewall bastions running -STABLE from end of April. Michael -- \|/ -O- Michael Elbel, ConSol* GmbH, - me@consol.de - 089 / 45841-128 /|\ Fermentation fault (coors dumped) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199808101013.MAA09930>