From owner-freebsd-questions Mon Mar 8 19: 9:37 1999 Delivered-To: freebsd-questions@freebsd.org Received: from center (center.oaep.go.th [202.44.64.4]) by hub.freebsd.org (Postfix) with SMTP id F2B9714F5A for ; Mon, 8 Mar 1999 19:05:50 -0800 (PST) (envelope-from pirat@center.oaep.go.th) Received: from prime.oaep.go.th by center (SMI-8.6/SMI-SVR4) id KAA06152; Tue, 9 Mar 1999 10:04:11 -0700 From: pirat@center.oaep.go.th (Pirat Sriyotha) Received: (from pirat@localhost) by prime.oaep.go.th (8.9.3/8.9.3) id KAA19111 for questions@FreeBSD.ORG; Tue, 9 Mar 1999 10:05:35 +0700 (ICT) Message-ID: X-Mailer: XFMail 1.3 [p0] on FreeBSD X-Priority: 3 (Normal) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit MIME-Version: 1.0 Date: Tue, 09 Mar 1999 10:05:35 +0700 (ICT) Reply-To: pirat@center.oaep.go.th To: questions@FreeBSD.ORG Subject: security check Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG hi, i do not understand the security check for daily run out put. for example my machine produce 'security check output' as follow =====begin===== Date: Tue, 9 Mar 1999 02:00:28 +0700 (ICT) From: Charlie Root Subject: prime security check output checking setuid files and devices: prime setuid diffs: 6c6 < -r-xr-sr-x 2 root tty 212992 Feb 4 20:12:32 1999 /sbin/dump --- > -r-xr-sr-x 2 root tty 249856 Nov 30 12:20:43 1998 /sbin/dump 8,9c8,9 < -r-xr-sr-x 2 root tty 212992 Feb 4 20:12:32 1999 /sbin/rdump < -r-xr-sr-x 2 root tty 229376 Feb 4 20:12:50 1999 /sbin/restore --- > -r-xr-sr-x 2 root tty 249856 Nov 30 12:20:43 1998 /sbin/rdump > -r-xr-sr-x 2 root tty 270336 Nov 30 12:20:50 1998 /sbin/restore 11c11 < -r-xr-sr-x 2 root tty 229376 Feb 4 20:12:50 1999 /sbin/rrestore --- > -r-xr-sr-x 2 root tty 270336 Nov 30 12:20:50 1998 /sbin/rrestore 76c76 < -r-sr-xr-- 1 root network 208896 Feb 4 20:18:15 1999 /usr/sbin/ppp --- > -r-sr-xr-- 1 root network 212992 Nov 30 12:14:21 1998 /usr/sbin/ppp =====end===== i just wonder why the files size and time stamp, like /usr/sbin/ppp, is changed. the current one is -r-sr-xr-- 1 root network 212992 Nov 30 12:14 ppp can this be a result of badguy doing something on my machine ? many thanks in advance with regards, psr ---------------------------------- E-Mail: Pirat SRIYOTHA Date: 09-Mar-99 Time: 10:04:16 This message was sent by XFMail ---------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message