Date: Sat, 15 Feb 1997 14:11:06 +1100 From: David Nugent <davidn@labs.usn.blaze.net.au> To: John Polstra <jdp@polstra.com> Cc: freebsd-current@FreeBSD.ORG Subject: Re: [root@server.blaze.net.au: server security check output] Message-ID: <19970215141106.27611@usn.blaze.net.au> In-Reply-To: <5e2ag5$h65@austin.polstra.com>; from John Polstra on Feb 02, 1997 at 10:21:57AM References: <19970215033810.19932@usn.blaze.net.au> <5e2ag5$h65@austin.polstra.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Feb 02, 1997 at 10:21:57AM, John Polstra wrote: > > This is the second time I've seen this since I last built > > world - something has "touched" sendmail. It doesn't appear to > > have been hacked, and I even checked the md5 against what it was > > originally when I last installed sendmail and it hasn't changed. > > But suddenly the file date has been modified, and only a couple > > of hours ago. > > Yes, I have seen this sort of thing in all versions of FreeBSD > since 2.0.5, the first one I used. It's not specific to sendmail, > although I've only noticed it in setuid programs. (That may be > just because those are the ones that show up in the security logs.) True enough. However, I checked the rest of the tree since I sent that mail, and it seems to be sendmail only at this stage. > I have seen it happen to my X server a couple of times. It is some > kind of anomaly involving the VM system, I would guess. Out of curiosity, is this linked to gdb's annoying habit of thinking that an executable has been changed when you run it a second time from the gdb prompt? > like it either, but nobody has ever been able to explain it, as > far as I know. On my system, I see it maybe once every 4-6 months. > I don't think anybody knows of a way to make it happen deliberately. Don't you just hate bugs like that? :-/ Thanks for the response. David Nugent - Unique Computing Pty Ltd - Melbourne, Australia Voice +61-3-9791-9547 Data/BBS +61-3-9792-3507 3:632/348@fidonet davidn@freebsd.org davidn@blaze.net.au http://www.blaze.net.au/~davidn/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19970215141106.27611>