From owner-freebsd-security Mon Apr 2 21: 0:24 2001 Delivered-To: freebsd-security@freebsd.org Received: from calliope.cs.brandeis.edu (calliope.cs.brandeis.edu [129.64.3.189]) by hub.freebsd.org (Postfix) with ESMTP id 1A52F37B71B for ; Mon, 2 Apr 2001 21:00:21 -0700 (PDT) (envelope-from meshko@calliope.cs.brandeis.edu) Received: from localhost (meshko@localhost) by calliope.cs.brandeis.edu (8.9.3/8.9.3) with ESMTP id AAA02878 for ; Tue, 3 Apr 2001 00:00:18 -0400 Date: Tue, 3 Apr 2001 00:00:18 -0400 (EDT) From: Mikhail Kruk To: Subject: odd setuid diffs Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I got very strange (IMHO) setuid diffs in my security reports today... Any explanations appreciated: xxxx.xxxx.xxx setuid diffs: 69c69 < 1698870 -rwsr-xr-x 1 root wheel 219148 Jul 19 16:20:56 2000 /usr/local/bin/screen-3.9.5 --- > 1698870 -rwsr-xr-x 1 root wheel 219148 Jul 19 17:20:56 2000 /usr/local/bin/screen-3.9.5 71c71 < 1230184 -rwsr-xr-x 1 root bin 264148 Jun 3 22:19:08 1999 /usr/local/sbin/hfaxd --- > 1230184 -rwsr-xr-x 1 root bin 264148 Jun 3 23:19:08 1999 /usr/local/sbin/hfaxd They are off by one hour, all right. I see possible cause: yesterday I've noticed that my time was set to EST instead of EDT and changed my timezone (one hour difference). But the question is: why those two files, not the rest of them?? What do they have in common? (Running 4.3-BETA FreeBSD 4.3-BETA #11: Fri Mar 9 03:36:40 EST 2001) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message