From owner-freebsd-questions@FreeBSD.ORG  Mon Jun 18 09:27:28 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id D4A0816A46C
	for <freebsd-questions@freebsd.org>;
	Mon, 18 Jun 2007 09:27:28 +0000 (UTC)
	(envelope-from A.Robinson@ms.unimelb.edu.au)
Received: from fallbackmx01.syd.optusnet.com.au
	(fallbackmx01.syd.optusnet.com.au [211.29.132.93])
	by mx1.freebsd.org (Postfix) with ESMTP id 6A46913C46E
	for <freebsd-questions@freebsd.org>;
	Mon, 18 Jun 2007 09:27:28 +0000 (UTC)
	(envelope-from A.Robinson@ms.unimelb.edu.au)
Received: from mail17.syd.optusnet.com.au (mail17.syd.optusnet.com.au
	[211.29.132.198])
	by fallbackmx01.syd.optusnet.com.au (8.12.11.20060308/8.12.11) with
	ESMTP id l5H1LOgW010692
	for <freebsd-questions@freebsd.org>; Sun, 17 Jun 2007 11:21:24 +1000
Received: from c220-237-183-166.frank1.vic.optusnet.com.au
	(c220-237-183-166.frank1.vic.optusnet.com.au [220.237.183.166])
	by mail17.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP id
	l5H1LJsJ022102
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
	for <freebsd-questions@freebsd.org>; Sun, 17 Jun 2007 11:21:20 +1000
Received: from c220-237-183-166.frank1.vic.optusnet.com.au (localhost
	[127.0.0.1])
	by c220-237-183-166.frank1.vic.optusnet.com.au (8.13.8/8.13.8) with
	ESMTP id l5H1L3TQ079843 for <freebsd-questions@freebsd.org>;
	Sun, 17 Jun 2007 11:21:03 +1000 (EST)
	(envelope-from A.Robinson@ms.unimelb.edu.au)
Received: (from andrewr@localhost)
	by c220-237-183-166.frank1.vic.optusnet.com.au (8.13.8/8.13.8/Submit)
	id l5H1L0wC079838
	for freebsd-questions@freebsd.org; Sun, 17 Jun 2007 11:21:00 +1000 (EST)
	(envelope-from A.Robinson@ms.unimelb.edu.au)
X-Authentication-Warning: c220-237-183-166.frank1.vic.optusnet.com.au: andrewr
	set sender to A.Robinson@ms.unimelb.edu.au using -f
Date: Sun, 17 Jun 2007 11:21:00 +1000
From: Andrew Robinson <A.Robinson@ms.unimelb.edu.au>
To: FreeBSD Questions <freebsd-questions@freebsd.org>
Message-ID: <20070617012100.GV63160@ms.unimelb.edu.au>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4.2.2i
Subject: New files in setuid.today
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Jun 2007 09:27:28 -0000

Hi everyone,

I have some new file names in my /var/log/setuid.today file.  There
are things on an external drive, pdfs, html documents, etc.  The only
common factor that I can see is that all of them are 's' in the group
permissions.  An example is:

1766558 -rw-r-sr--  1 andrewr  andrewr     8076 Jul 24 19:38:17 2005
/home/andrewr/0.svn/0.infrastructure/www_public/andrewpr.JPG

Just checking the names of the files, I know what each one of them is
(or is supposed to be!) and none of them are supposed to bne
executable.

Can anyone tell me how this might happen, and what I should do to
clean it up?  

Thanks!

Andrew
-- 
Andrew Robinson  
Department of Mathematics and Statistics            Tel: +61-3-8344-9763
University of Melbourne, VIC 3010 Australia         Fax: +61-3-8344-4599
http://www.ms.unimelb.edu.au/~andrewpr
http://blogs.mbs.edu/fishing-in-the-bay/