Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 05 Aug 1998 15:39:06 -0600
From:      Brett Glass <brett@lariat.org>
To:        security@FreeBSD.ORG
Subject:   Changes to restore and rrestore
Message-ID:  <199808052139.PAA01240@lariat.lariat.org>

next in thread | raw e-mail | index | archive | help
As mentioned in an earlier message, our daily security "diff" reports that
the dates and times on /sbin/rrestore and /sbin/restore have mysteriously
changed. The new dates are approximately the time when we had a system
crash and had to run fsck.

Could it be that fsck, when it repairs directories, changes dates? Or have
we been hacked again, despite replacing the whole OS and bringing back only
data files?

--Brett


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199808052139.PAA01240>