From owner-freebsd-security Mon Aug 21 8: 7:10 2000 Delivered-To: freebsd-security@freebsd.org Received: from fnal.gov (heffalump.fnal.gov [131.225.9.20]) by hub.freebsd.org (Postfix) with ESMTP id 12DC537B424 for ; Mon, 21 Aug 2000 08:07:06 -0700 (PDT) Received: from nova.fnal.gov ([131.225.18.207]) by smtp.fnal.gov (PMDF V6.0-24 #44770) with ESMTP id <0FZN00MM8DYW3J@smtp.fnal.gov> for freebsd-security@FreeBSD.ORG; Mon, 21 Aug 2000 10:06:32 -0500 (CDT) Received: from localhost (tez@localhost) by nova.fnal.gov (8.9.3+Sun/8.9.1) with ESMTP id KAA20800; Mon, 21 Aug 2000 10:06:31 -0500 (CDT) Date: Mon, 21 Aug 2000 10:06:31 -0500 (CDT) From: Tim Zingelman Subject: Re: "snmp.sample" in /usr/local/etc/rc.d/ In-reply-to: <20000821081020Z277228-23170+34169@ajax2.sovam.com> X-Sender: tez@nova.fnal.gov To: "Vladimir I. Kulakov" Cc: freebsd-security@FreeBSD.ORG Message-id: MIME-version: 1.0 Content-type: TEXT/PLAIN; charset=US-ASCII X-Authentication-warning: nova.fnal.gov: tez owned process doing -bs Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Mon, 21 Aug 2000, Vladimir I. Kulakov wrote: > > > But at the next day after upgrade I've suddenly noticed > > > two new scripts in /usr/local/etc/rc.d/ which intended to > > > start at every bootup process and which I've never installed. Note that only files ending in .sh will be executed at boot time, so a file like 'snmpd.sh.sample' is pretty much harmless. > > > Moreover, at the /usr/local/sbin/ there two more > > > files appeared (snmpd and the second something like this). > > > I've never installed snmp on that mashine and mtree > > > tells me such files never existed there. The package/port named ucd-snmp (in /usr/ports/net/ucd-snmp) installs the following files (and many others): /usr/local/etc/rc.d/snmpd.sh.sample /usr/local/sbin/snmpd /usr/local/sbin/snmptrapd If these are the files you are seeing, then someone installed this port or this package. This command should get rid of it: pkg_delete ucd-snmp-4.1.2 (If the version number is wrong, ls /var/db/pkg, to see it.) - Tim P.S. You will likely get much more help from mailing lists like this one if you provide much more detail than you did... statements "snmpd and the second something like this", cause me to think, if you don't make the effort to even know the file names, why should I make the effort to help you. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message