Date: Thu, 2 Aug 2001 16:39:42 -0500 From: Will Andrews <will@physics.purdue.edu> To: Christian Weisgerber <naddy@mips.inka.de> Cc: freebsd-current@FreeBSD.ORG Subject: Re: What's touching my executables? Message-ID: <20010802163942.J451@bohr.physics.purdue.edu> In-Reply-To: <9kc65b$47n$1@kemoauc.mips.inka.de>; from naddy@mips.inka.de on Thu, Aug 02, 2001 at 06:28:59PM %2B0000 References: <9kc65b$47n$1@kemoauc.mips.inka.de>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Aug 02, 2001 at 06:28:59PM +0000, Christian Weisgerber (naddy@mips.inka.de) wrote: > An increasing number of executables on that box are sporting ever > newer mtimes. This appears to have been going on ever since the > Jul 25 update. There is no clear pattern which executables are > touched. md5 comparisons with previous backup levels (using a Jul 13 > copy of md5) suggest that the executables have not been changed. > > For various reasons I consider it unlikely that I'm dealing with a > security issue here, although I'm looking into that as well. > > Can anybody think of a technical explanation? Probably the recent change (IIRC) that someone turned running an executable into a mtime change. -- wca To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010802163942.J451>