From owner-freebsd-security  Thu Nov 29 15:33: 0 2001
Delivered-To: freebsd-security@freebsd.org
Received: from peitho.fxp.org (peitho.fxp.org [209.26.95.40])
	by hub.freebsd.org (Postfix) with ESMTP id 6576C37B405
	for <freebsd-security@freebsd.org>; Thu, 29 Nov 2001 15:32:53 -0800 (PST)
Received: by peitho.fxp.org (Postfix, from userid 1501)
	id 8EDC213651; Thu, 29 Nov 2001 18:32:52 -0500 (EST)
Date: Thu, 29 Nov 2001 18:32:52 -0500
From: Chris Faulhaber <jedgar@fxp.org>
To: George.Giles@mcmail.vanderbilt.edu
Cc: freebsd-security@freebsd.org
Subject: Re: root group membership
Message-ID: <20011129183252.A7718@peitho.fxp.org>
Mail-Followup-To: Chris Faulhaber <jedgar@fxp.org>,
	George.Giles@mcmail.vanderbilt.edu, freebsd-security@freebsd.org
References: <OF486197C2.F5863006-ON86256B13.00800FBB@MC.VANDERBILT.EDU>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="ZPt4rx8FFjLCG7dd"
Content-Disposition: inline
In-Reply-To: <OF486197C2.F5863006-ON86256B13.00800FBB@MC.VANDERBILT.EDU>
User-Agent: Mutt/1.3.20i
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


--ZPt4rx8FFjLCG7dd
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Nov 29, 2001 at 05:20:31PM -0600, George.Giles@mcmail.vanderbilt.ed=
u wrote:
> FreeBSD 4.4 release /etc/group files:
>=20
> # $FreeBSD: src/etc/group,v 1.19 1999/08/27 23:23:41 peter Exp $
> #
> wheel:*:0:root
> daemon:*:1:daemon
> kmem:*:2:root
> sys:*:3:root
> tty:*:4:root
> operator:*:5:root
> mail:*:6:
> bin:*:7:
> news:*:8:
> man:*:9:
> games:*:13:
> staff:*:20:root
> guest:*:31:root
>=20
> Are root memberships here nomal, or have I been hacked ?
>=20

Looks correct:

http://www.freebsd.org/cgi/cvsweb.cgi/src/etc/group?rev=3D1.19.2.1

--=20
Chris D. Faulhaber - jedgar@fxp.org - jedgar@FreeBSD.org
--------------------------------------------------------
FreeBSD: The Power To Serve   -   http://www.FreeBSD.org

--ZPt4rx8FFjLCG7dd
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: FreeBSD: The Power To Serve

iEYEARECAAYFAjwGxaMACgkQObaG4P6BelAlTgCcDw6xpPEcU5yCryTscS2alnjB
As8An23ad/Qmonq9qhCGy+Fqth9Ehylr
=sfh5
-----END PGP SIGNATURE-----

--ZPt4rx8FFjLCG7dd--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message