From owner-freebsd-security Thu Jan 8 06:31:50 1998 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id GAA19327 for security-outgoing; Thu, 8 Jan 1998 06:31:50 -0800 (PST) (envelope-from owner-freebsd-security) Received: from hammurabi.nh.ultra.net (hammurabi.nh.ultra.net [205.162.79.24]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id GAA19320 for ; Thu, 8 Jan 1998 06:31:45 -0800 (PST) (envelope-from lhartfor@mtghouse.com) Received: from lucy.portsmouth (paulg.nh.ultranet.com [207.41.158.58]) by hammurabi.nh.ultra.net (8.8.5/ult.n14767) with SMTP id JAA11622 for ; Thu, 8 Jan 1998 09:31:47 -0500 (EST) Received: (qmail 11191 invoked from network); 8 Jan 1998 14:32:50 -0000 Received: from unknown (HELO larry) (192.32.47.65) by 192.32.47.84 with SMTP; 8 Jan 1998 14:32:50 -0000 Date: Thu, 8 Jan 1998 09:40:30 -0500 (EST) From: Lance Hartford X-Sender: lhartfor@larry Reply-To: Lance Hartford To: freebsd-security@freebsd.org Subject: /usr/bin/su modification time changing Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@freebsd.org X-Loop: FreeBSD.org Precedence: bulk I just installed 2.2.5 on a PC and I received the following portion of message in a security mail that was sent out last night: xyz setuid diffs: 152c152 < -r-sr-xr-x 1 root bin 16384 Oct 21 10:19:25 1997 /usr/bin/su --- > -r-sr-xr-x 1 root bin 16384 Jan 7 19:40:28 1998 /usr/bin/su I did a "sum" on the /usr/bin/su on another system onsite, and found that there was no difference compared to the one on this system. Does this imply that there is a security problem at my site? Thanks. Lance