From owner-freebsd-questions Fri Sep 18 19:53:24 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id TAA04099 for freebsd-questions-outgoing; Fri, 18 Sep 1998 19:53:24 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from whitestar.cpn.org.au ([147.109.154.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id TAA04090 for ; Fri, 18 Sep 1998 19:53:16 -0700 (PDT) (envelope-from cpn@dpac.tas.gov.au) Received: from jumpgate.cpn.org.au (jumpgate.cpn.org.au [172.16.1.1]) by whitestar.cpn.org.au (8.8.8/8.8.7) with SMTP id MAA09761 for ; Sat, 19 Sep 1998 12:52:49 +1000 (EST) (envelope-from cpn@dpac.tas.gov.au) Date: Sat, 19 Sep 1998 12:52:48 +1000 (EST) From: Carey Nairn X-Sender: cpn@jumpgate.cpn.org.au Reply-To: Carey Nairn To: questions@FreeBSD.ORG Subject: daily security check Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hi, I have a question regarding the daily security check: last night I got the following report: checking setuid files and devices: whitestar setuid diffs: 46c46 < -r-sr-xr-x 5 root bin 286720 Sep 15 18:44:12 1998 /usr/bin/hoststat --- > -r-sr-xr-x 5 root bin 286720 Sep 18 20:27:50 1998 /usr/bin/hoststat 55c55 < -r-sr-xr-x 5 root bin 286720 Sep 15 18:44:12 1998 /usr/bin/mailq --- > -r-sr-xr-x 5 root bin 286720 Sep 18 20:27:50 1998 /usr/bin/mailq 58c58 < -r-sr-xr-x 5 root bin 286720 Sep 15 18:44:12 1998 /usr/bin/newaliases --- > -r-sr-xr-x 5 root bin 286720 Sep 18 20:27:50 1998 /usr/bin/newaliases 118,119c118,119 < -r-sr-xr-x 5 root bin 286720 Sep 15 18:44:12 1998 /usr/sbin/purgestat < -r-sr-xr-x 5 root bin 286720 Sep 15 18:44:12 1998 /usr/sbin/sendmail --- > -r-sr-xr-x 5 root bin 286720 Sep 18 20:27:50 1998 /usr/sbin/purgestat > -r-sr-xr-x 5 root bin 286720 Sep 18 20:27:50 1998 /usr/sbin/sendmail checking for uids of 0: root 0 toor 0 I have compared the files listed with the ones on the 2.2.7 live filesystem CD and they are the same. What would cause the timestamp changes on these files? This also happened on Sep 15 (as you can see from the previous timestamps). Prior to that, the files had the same timestamps as the ones on the CD. thanks, Carey Nairn To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message