From owner-freebsd-questions Thu Oct 18 18:51:46 2001 Delivered-To: freebsd-questions@freebsd.org Received: from topaz.mdcc.cx (topaz.mdcc.cx [212.204.230.141]) by hub.freebsd.org (Postfix) with ESMTP id 0C9EC37B403 for ; Thu, 18 Oct 2001 18:51:44 -0700 (PDT) Received: from k7.mavetju.org (topaz.mdcc.cx [212.204.230.141]) by topaz.mdcc.cx (Postfix) with ESMTP id 76A1E2B69F; Fri, 19 Oct 2001 03:51:33 +0200 (CEST) Received: by k7.mavetju.org (Postfix, from userid 1001) id B171E113; Fri, 19 Oct 2001 11:51:02 +1000 (EST) Date: Fri, 19 Oct 2001 11:51:02 +1000 From: Edwin Groothuis To: Scott Gerhardt Cc: FreeBSD Subject: Re: Setuid Log - Is this normal Message-ID: <20011019115102.A552@k7.mavetju.org> Mail-Followup-To: Edwin Groothuis , Scott Gerhardt , FreeBSD References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from scott@gerhardt-it.com on Thu, Oct 18, 2001 at 07:53:50PM -0600 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Thu, Oct 18, 2001 at 07:53:50PM -0600, Scott Gerhardt wrote: > Running FreeBSD 4.4-Release with a custom kernel. It is a new install (10 > days old). > I'm new to FreeBSD so I have nothing to compare this with: > > I have 63 entries in my /var/log/setuid.today. All entries are dated Sept > 18, 2001 between 11:25 and 11:30. > > Is this ok or are these entries something to be concerned about? These are the compiled binaries shipped when you installed the 4.4 version. I have them too: 48 -r-xr-sr-x 1 root operator 59388 Sep 19 03:25:35 2001 /bin/df 60 -r-sr-xr-x 1 root wheel 319688 Sep 19 03:33:25 2001 /bin/rcp 339 -r-xr-sr-x 1 root kmem 63316 Sep 19 03:27:35 2001 /sbin/ccdconfig 68 -r-xr-sr-x 2 root tty 332300 Sep 19 03:34:04 2001 /sbin/dump 382 -r-sr-xr-x 1 root wheel 198340 Sep 19 03:27:45 2001 /sbin/ping 383 -r-sr-xr-x 1 root bin 198068 Sep 19 03:27:45 2001 /sbin/ping6 68 -r-xr-sr-x 2 root tty 332300 Sep 19 03:34:04 2001 /sbin/rdump 388 -r-sr-xr-x 1 root wheel 195800 Sep 19 03:27:46 2001 /sbin/route 393 -r-sr-x--- 1 root operator 166304 Sep 19 03:27:47 2001 /sbin/shutdown [...] Edwin -- Edwin Groothuis | Personal website: http://www.MavEtJu.org edwin@mavetju.org | Interested in MUDs? Visit Fatal Dimensions: ------------------+ http://www.FatalDimensions.org/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message