From owner-freebsd-questions Fri Jun 7 01:14:37 1996 Return-Path: owner-questions Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id BAA28946 for questions-outgoing; Fri, 7 Jun 1996 01:14:37 -0700 (PDT) Received: from skipper.epsilon.nl (skipper.epsilon.nl [194.178.91.12]) by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id BAA28941 for ; Fri, 7 Jun 1996 01:14:28 -0700 (PDT) Received: from skipper.epsilon.nl (localhost [127.0.0.1]) by skipper.epsilon.nl (8.6.12/8.6.12) with SMTP id KAA19606 for ; Fri, 7 Jun 1996 10:13:32 GMT Message-ID: <31B800CC.41C67EA6@epsilon.nl> Date: Fri, 07 Jun 1996 12:13:32 +0200 From: Jouke Dijkstra Organization: Epsilon Computer Support X-Mailer: Mozilla 2.0 (X11; I; FreeBSD 2.1.0-RELEASE i386) MIME-Version: 1.0 To: freebsd-questions@freebsd.org Subject: [Fwd: skipper security check output] Content-Type: multipart/mixed; boundary="------------446B9B3D2781E494167EB0E7" Sender: owner-questions@freebsd.org X-Loop: FreeBSD.org Precedence: bulk This is a multi-part message in MIME format. --------------446B9B3D2781E494167EB0E7 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Now this is a little extreme.. Read about who had a problem similar to this a little while ago, though he had it with only some files, not a whole bunch like this. Could someone please explain what's going on? This system is running 2.1 RELEASE. Hardware: - P75 - 16MB - Asus MB - 1.2 IBM EIDE harddisk Nothing special I'd say.. - Jouke --------------446B9B3D2781E494167EB0E7 Content-Type: message/rfc822 Content-Transfer-Encoding: 7bit Content-Disposition: inline Received: (from root@localhost) by skipper.epsilon.nl (8.6.12/8.6.12) id EAA17734 for root; Fri, 7 Jun 1996 04:00:07 +0200 Date: Fri, 7 Jun 1996 04:00:07 +0200 From: "Syetem Admin epsilon.nl" Message-Id: <199606070200.EAA17734@skipper.epsilon.nl> Subject: skipper security check output Apparently-To: root X-Mozilla-Status: 0001 checking setuid files and devices: skipper setuid/device diffs: 1,92c1,92 < -r-xr-sr-x 1 bin operator 65536 Nov 16 09:43:41 1995 /bin/df < -r-xr-sr-x 1 bin kmem 159744 Nov 16 09:43:53 1995 /bin/ps < -r-sr-xr-x 1 root bin 172032 Nov 16 09:43:55 1995 /bin/rcp < -r-xr-sr-x 1 bin kmem 102400 Nov 16 09:49:10 1995 /sbin/dmesg < -r-sr-sr-x 2 root tty 188416 Nov 16 09:49:13 1995 /sbin/dump < -r-sr-xr-x 1 root bin 139264 Nov 16 09:50:03 1995 /sbin/mount_msdos < -r-sr-xr-x 1 root bin 118784 Nov 16 09:49:45 1995 /sbin/ping < -r-sr-sr-x 2 root tty 188416 Nov 16 09:49:13 1995 /sbin/rdump < -r-sr-sr-x 2 root tty 204800 Nov 16 09:49:50 1995 /sbin/restore < -r-sr-xr-x 1 root bin 126976 Nov 16 09:49:51 1995 /sbin/route < -r-sr-sr-x 2 root tty 204800 Nov 16 09:49:50 1995 /sbin/rrestore < -r-sr-x--- 1 root operator 135168 Nov 16 09:49:54 1995 /sbin/shutdown < -rwsr-xr-x 1 root wheel 2828389 Mar 11 10:11:46 1996 /usr/X11R6/bin/XF86_SVGA < -rwsr-xr-x 1 root sys 147456 Oct 6 23:06:57 1995 /usr/X11R6/bin/color_xterm < -rwsr-xr-x 1 root wheel 16384 Mar 11 10:11:40 1996 /usr/X11R6/bin/xconsole < -r-sr-xr-x 4 root bin 20480 Nov 16 09:52:38 1995 /usr/bin/at < -r-sr-xr-x 4 root bin 20480 Nov 16 09:52:38 1995 /usr/bin/atq < -r-sr-xr-x 4 root bin 20480 Nov 16 09:52:38 1995 /usr/bin/atrm < -r-sr-xr-x 4 root bin 20480 Nov 16 09:52:38 1995 /usr/bin/batch < -r-sr-xr-x 6 root bin 24576 Nov 16 09:52:48 1995 /usr/bin/chfn < -r-sr-xr-x 6 root bin 24576 Nov 16 09:52:48 1995 /usr/bin/chpass < -r-sr-xr-x 6 root bin 24576 Nov 16 09:52:48 1995 /usr/bin/chsh < -r-sr-xr-x 1 root bin 24576 Nov 16 09:56:10 1995 /usr/bin/crontab < -r-sr-xr-x 1 uucp bin 110592 Nov 16 09:45:41 1995 /usr/bin/cu < -r-xr-sr-x 1 bin kmem 16384 Nov 16 09:53:19 1995 /usr/bin/fstat < -r-xr-sr-x 1 bin kmem 16384 Nov 16 09:53:33 1995 /usr/bin/ipcs < -r-sr-xr-x 1 root bin 12288 Nov 16 09:53:39 1995 /usr/bin/keyinit < -r-sr-xr-x 1 root bin 12288 Nov 16 09:53:48 1995 /usr/bin/lock < -r-sr-xr-x 1 root bin 20480 Nov 16 09:53:49 1995 /usr/bin/login < -r-sr-sr-x 1 root daemon 20480 Nov 16 09:56:25 1995 /usr/bin/lpq < -r-sr-sr-x 1 root daemon 20480 Nov 16 09:56:26 1995 /usr/bin/lpr < -r-sr-sr-x 1 root daemon 16384 Nov 16 09:56:27 1995 /usr/bin/lprm < -r-sr-sr-x 3 root kmem 180224 Nov 16 09:59:26 1995 /usr/bin/mailq < -r-sr-xr-x 1 man bin 28672 Nov 16 09:47:31 1995 /usr/bin/man < -r-xr-sr-x 1 bin kmem 8192 Nov 16 09:54:04 1995 /usr/bin/modstat < -r-xr-sr-x 1 bin kmem 57344 Nov 16 09:54:09 1995 /usr/bin/netstat < -r-sr-sr-x 3 root kmem 180224 Nov 16 09:59:26 1995 /usr/bin/newaliases < -r-xr-sr-x 1 bin kmem 12288 Nov 16 09:54:10 1995 /usr/bin/nfsstat < -r-sr-xr-x 2 root bin 20480 Nov 16 09:54:13 1995 /usr/bin/passwd < -r-sr-xr-x 1 root bin 12288 Nov 16 09:54:18 1995 /usr/bin/quota < -r-sr-xr-x 1 root bin 45056 Nov 16 09:54:20 1995 /usr/bin/rdist < -r-sr-xr-x 1 root bin 16384 Nov 16 09:54:23 1995 /usr/bin/rlogin < -r-sr-xr-x 1 root bin 12288 Nov 16 09:54:26 1995 /usr/bin/rsh < -rws--x--x 2 root bin 290816 Nov 16 09:47:46 1995 /usr/bin/sperl4.036 < -r-sr-xr-x 1 root bin 12288 Nov 16 09:54:45 1995 /usr/bin/su < -rws--x--x 2 root bin 290816 Nov 16 09:47:46 1995 /usr/bin/suidperl < -r-xr-sr-x 1 bin kmem 40960 Nov 16 09:55:50 1995 /usr/bin/systat < -r-xr-sr-x 2 bin kmem 16384 Nov 16 09:55:32 1995 /usr/bin/uptime < -r-sr-xr-x 1 uucp bin 81920 Nov 16 09:45:45 1995 /usr/bin/uucp < -r-sr-xr-x 1 uucp bin 36864 Nov 16 09:45:46 1995 /usr/bin/uuname < -r-sr-xr-x 1 uucp bin 86016 Nov 16 09:45:48 1995 /usr/bin/uustat < -r-sr-xr-x 1 uucp bin 81920 Nov 16 09:45:49 1995 /usr/bin/uux < -r-xr-sr-x 1 bin kmem 20480 Nov 16 09:55:52 1995 /usr/bin/vmstat < -r-xr-sr-x 2 bin kmem 16384 Nov 16 09:55:32 1995 /usr/bin/w < -r-xr-sr-x 1 bin tty 12288 Nov 16 09:55:33 1995 /usr/bin/wall < -r-xr-sr-x 1 bin tty 12288 Nov 16 09:55:40 1995 /usr/bin/write < -r-sr-xr-x 6 root bin 24576 Nov 16 09:52:48 1995 /usr/bin/ypchfn < -r-sr-xr-x 6 root bin 24576 Nov 16 09:52:48 1995 /usr/bin/ypchpass < -r-sr-xr-x 6 root bin 24576 Nov 16 09:52:48 1995 /usr/bin/ypchsh < -r-sr-xr-x 2 root bin 20480 Nov 16 09:54:13 1995 /usr/bin/yppasswd < -r-sr-xr-x 1 root bin 12288 Nov 16 09:48:54 1995 /usr/libexec/mail.local < -r-sr-xr-x 1 uucp bin 196608 Nov 16 09:45:43 1995 /usr/libexec/uucp/uucico < -r-sr-x--- 1 uucp uucp 90112 Nov 16 09:45:50 1995 /usr/libexec/uucp/uuxqt < -rws--x--x 2 root bin 393216 Oct 10 01:09:32 1995 /usr/local/bin/sperl5.001 < -rws--x--x 2 root bin 393216 Oct 10 01:09:32 1995 /usr/local/bin/suidperl < -r-xr-sr-x 1 bin kmem 12288 Nov 16 09:58:07 1995 /usr/sbin/iostat < -r-xr-sr-x 1 bin daemon 24576 Nov 16 09:56:24 1995 /usr/sbin/lpc < -rwsr-xr-x 1 root bin 20480 Nov 16 09:56:35 1995 /usr/sbin/mrinfo < -rwsr-xr-x 1 root bin 28672 Nov 16 09:56:37 1995 /usr/sbin/mtrace < drwxrwsr-x 3 2775 1744 512 Jan 20 08:03:42 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2 < drwxrwsr-x 11 2775 dialer 512 Mar 11 11:28:52 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2/src < drwxrwsr-x 2 2775 1744 1024 Mar 11 11:28:47 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2/src/GNUmalloc < drwxrwsr-x 2 2775 1744 512 Mar 11 11:30:37 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2/src/announce < drwxrwsr-x 2 2775 1744 512 Mar 11 11:29:11 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2/src/include < drwxrwsr-x 2 2775 1744 512 Mar 11 11:29:10 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2/src/lib < drwxrwsr-x 2 2775 1744 512 Jan 20 08:03:50 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2/src/manager < drwxrwsr-x 2 2775 1744 512 Mar 11 11:29:10 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2/src/regex < drwxrwsr-x 2 2775 1744 512 Mar 11 11:28:49 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2/src/scripts < drwxrwsr-x 2 2775 1744 2048 Mar 11 11:30:36 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2/src/server < drwxrwsr-x 2 2775 1744 512 Mar 11 11:29:16 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2/src/url < -r-xr-sr-x 1 bin kmem 28672 Nov 16 09:58:11 1995 /usr/sbin/ncrcontrol < -r-sr-xr-x 1 root bin 86016 Nov 16 09:57:07 1995 /usr/sbin/ppp < -r-sr-xr-x 1 root bin 61440 Nov 16 09:57:08 1995 /usr/sbin/pppd < -r-xr-sr-x 1 bin kmem 12288 Nov 16 09:57:09 1995 /usr/sbin/pppstats < -r-xr-sr-x 2 bin kmem 20480 Nov 16 09:57:10 1995 /usr/sbin/pstat < -r-sr-sr-x 3 root kmem 180224 Nov 16 09:59:26 1995 /usr/sbin/sendmail < -r-sr-xr-x 1 root bin 12288 Nov 16 09:57:25 1995 /usr/sbin/sliplogin < -r-xr-sr-x 1 bin kmem 12288 Nov 16 09:57:28 1995 /usr/sbin/slstat < -r-xr-sr-x 2 bin kmem 20480 Nov 16 09:57:10 1995 /usr/sbin/swapinfo < -r-sr-xr-x 1 root bin 20480 Nov 16 09:57:36 1995 /usr/sbin/timedc < -r-sr-xr-x 1 root bin 16384 Nov 16 09:57:37 1995 /usr/sbin/traceroute < -r-xr-sr-x 1 bin kmem 12288 Nov 16 09:57:38 1995 /usr/sbin/trpt --- > -r-xr-sr-x 1 bin operator 65536 Nov 16 10:43:41 1995 /bin/df > -r-xr-sr-x 1 bin kmem 159744 Nov 16 10:43:53 1995 /bin/ps > -r-sr-xr-x 1 root bin 172032 Nov 16 10:43:55 1995 /bin/rcp > -r-xr-sr-x 1 bin kmem 102400 Nov 16 10:49:10 1995 /sbin/dmesg > -r-sr-sr-x 2 root tty 188416 Nov 16 10:49:13 1995 /sbin/dump > -r-sr-xr-x 1 root bin 139264 Nov 16 10:50:03 1995 /sbin/mount_msdos > -r-sr-xr-x 1 root bin 118784 Nov 16 10:49:45 1995 /sbin/ping > -r-sr-sr-x 2 root tty 188416 Nov 16 10:49:13 1995 /sbin/rdump > -r-sr-sr-x 2 root tty 204800 Nov 16 10:49:50 1995 /sbin/restore > -r-sr-xr-x 1 root bin 126976 Nov 16 10:49:51 1995 /sbin/route > -r-sr-sr-x 2 root tty 204800 Nov 16 10:49:50 1995 /sbin/rrestore > -r-sr-x--- 1 root operator 135168 Nov 16 10:49:54 1995 /sbin/shutdown > -rwsr-xr-x 1 root wheel 2828389 Mar 11 11:11:46 1996 /usr/X11R6/bin/XF86_SVGA > -rwsr-xr-x 1 root sys 147456 Oct 7 00:06:57 1995 /usr/X11R6/bin/color_xterm > -rwsr-xr-x 1 root wheel 16384 Mar 11 11:11:40 1996 /usr/X11R6/bin/xconsole > -r-sr-xr-x 4 root bin 20480 Nov 16 10:52:38 1995 /usr/bin/at > -r-sr-xr-x 4 root bin 20480 Nov 16 10:52:38 1995 /usr/bin/atq > -r-sr-xr-x 4 root bin 20480 Nov 16 10:52:38 1995 /usr/bin/atrm > -r-sr-xr-x 4 root bin 20480 Nov 16 10:52:38 1995 /usr/bin/batch > -r-sr-xr-x 6 root bin 24576 Nov 16 10:52:48 1995 /usr/bin/chfn > -r-sr-xr-x 6 root bin 24576 Nov 16 10:52:48 1995 /usr/bin/chpass > -r-sr-xr-x 6 root bin 24576 Nov 16 10:52:48 1995 /usr/bin/chsh > -r-sr-xr-x 1 root bin 24576 Nov 16 10:56:10 1995 /usr/bin/crontab > -r-sr-xr-x 1 uucp bin 110592 Nov 16 10:45:41 1995 /usr/bin/cu > -r-xr-sr-x 1 bin kmem 16384 Nov 16 10:53:19 1995 /usr/bin/fstat > -r-xr-sr-x 1 bin kmem 16384 Nov 16 10:53:33 1995 /usr/bin/ipcs > -r-sr-xr-x 1 root bin 12288 Nov 16 10:53:39 1995 /usr/bin/keyinit > -r-sr-xr-x 1 root bin 12288 Nov 16 10:53:48 1995 /usr/bin/lock > -r-sr-xr-x 1 root bin 20480 Nov 16 10:53:49 1995 /usr/bin/login > -r-sr-sr-x 1 root daemon 20480 Nov 16 10:56:25 1995 /usr/bin/lpq > -r-sr-sr-x 1 root daemon 20480 Nov 16 10:56:26 1995 /usr/bin/lpr > -r-sr-sr-x 1 root daemon 16384 Nov 16 10:56:27 1995 /usr/bin/lprm > -r-sr-sr-x 3 root kmem 180224 Nov 16 10:59:26 1995 /usr/bin/mailq > -r-sr-xr-x 1 man bin 28672 Nov 16 10:47:31 1995 /usr/bin/man > -r-xr-sr-x 1 bin kmem 8192 Nov 16 10:54:04 1995 /usr/bin/modstat > -r-xr-sr-x 1 bin kmem 57344 Nov 16 10:54:09 1995 /usr/bin/netstat > -r-sr-sr-x 3 root kmem 180224 Nov 16 10:59:26 1995 /usr/bin/newaliases > -r-xr-sr-x 1 bin kmem 12288 Nov 16 10:54:10 1995 /usr/bin/nfsstat > -r-sr-xr-x 2 root bin 20480 Nov 16 10:54:13 1995 /usr/bin/passwd > -r-sr-xr-x 1 root bin 12288 Nov 16 10:54:18 1995 /usr/bin/quota > -r-sr-xr-x 1 root bin 45056 Nov 16 10:54:20 1995 /usr/bin/rdist > -r-sr-xr-x 1 root bin 16384 Nov 16 10:54:23 1995 /usr/bin/rlogin > -r-sr-xr-x 1 root bin 12288 Nov 16 10:54:26 1995 /usr/bin/rsh > -rws--x--x 2 root bin 290816 Nov 16 10:47:46 1995 /usr/bin/sperl4.036 > -r-sr-xr-x 1 root bin 12288 Nov 16 10:54:45 1995 /usr/bin/su > -rws--x--x 2 root bin 290816 Nov 16 10:47:46 1995 /usr/bin/suidperl > -r-xr-sr-x 1 bin kmem 40960 Nov 16 10:55:50 1995 /usr/bin/systat > -r-xr-sr-x 2 bin kmem 16384 Nov 16 10:55:32 1995 /usr/bin/uptime > -r-sr-xr-x 1 uucp bin 81920 Nov 16 10:45:45 1995 /usr/bin/uucp > -r-sr-xr-x 1 uucp bin 36864 Nov 16 10:45:46 1995 /usr/bin/uuname > -r-sr-xr-x 1 uucp bin 86016 Nov 16 10:45:48 1995 /usr/bin/uustat > -r-sr-xr-x 1 uucp bin 81920 Nov 16 10:45:49 1995 /usr/bin/uux > -r-xr-sr-x 1 bin kmem 20480 Nov 16 10:55:52 1995 /usr/bin/vmstat > -r-xr-sr-x 2 bin kmem 16384 Nov 16 10:55:32 1995 /usr/bin/w > -r-xr-sr-x 1 bin tty 12288 Nov 16 10:55:33 1995 /usr/bin/wall > -r-xr-sr-x 1 bin tty 12288 Nov 16 10:55:40 1995 /usr/bin/write > -r-sr-xr-x 6 root bin 24576 Nov 16 10:52:48 1995 /usr/bin/ypchfn > -r-sr-xr-x 6 root bin 24576 Nov 16 10:52:48 1995 /usr/bin/ypchpass > -r-sr-xr-x 6 root bin 24576 Nov 16 10:52:48 1995 /usr/bin/ypchsh > -r-sr-xr-x 2 root bin 20480 Nov 16 10:54:13 1995 /usr/bin/yppasswd > -r-sr-xr-x 1 root bin 12288 Nov 16 10:48:54 1995 /usr/libexec/mail.local > -r-sr-xr-x 1 uucp bin 196608 Nov 16 10:45:43 1995 /usr/libexec/uucp/uucico > -r-sr-x--- 1 uucp uucp 90112 Nov 16 10:45:50 1995 /usr/libexec/uucp/uuxqt > -rws--x--x 2 root bin 393216 Oct 10 02:09:32 1995 /usr/local/bin/sperl5.001 > -rws--x--x 2 root bin 393216 Oct 10 02:09:32 1995 /usr/local/bin/suidperl > -r-xr-sr-x 1 bin kmem 12288 Nov 16 10:58:07 1995 /usr/sbin/iostat > -r-xr-sr-x 1 bin daemon 24576 Nov 16 10:56:24 1995 /usr/sbin/lpc > -rwsr-xr-x 1 root bin 20480 Nov 16 10:56:35 1995 /usr/sbin/mrinfo > -rwsr-xr-x 1 root bin 28672 Nov 16 10:56:37 1995 /usr/sbin/mtrace > drwxrwsr-x 3 2775 1744 512 Jan 20 09:03:42 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2 > drwxrwsr-x 11 2775 dialer 512 Mar 11 12:28:52 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2/src > drwxrwsr-x 2 2775 1744 1024 Mar 11 12:28:47 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2/src/GNUmalloc > drwxrwsr-x 2 2775 1744 512 Mar 11 12:30:37 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2/src/announce > drwxrwsr-x 2 2775 1744 512 Mar 11 12:29:11 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2/src/include > drwxrwsr-x 2 2775 1744 512 Mar 11 12:29:10 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2/src/lib > drwxrwsr-x 2 2775 1744 512 Jan 20 09:03:50 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2/src/manager > drwxrwsr-x 2 2775 1744 512 Mar 11 12:29:10 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2/src/regex > drwxrwsr-x 2 2775 1744 512 Mar 11 12:28:49 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2/src/scripts > drwxrwsr-x 2 2775 1744 2048 Mar 11 12:30:36 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2/src/server > drwxrwsr-x 2 2775 1744 512 Mar 11 12:29:16 1996 /usr/home/jouke/ftpstuff/cached-1.4.pl2/src/url > -r-xr-sr-x 1 bin kmem 28672 Nov 16 10:58:11 1995 /usr/sbin/ncrcontrol > -r-sr-xr-x 1 root bin 86016 Nov 16 10:57:07 1995 /usr/sbin/ppp > -r-sr-xr-x 1 root bin 61440 Nov 16 10:57:08 1995 /usr/sbin/pppd > -r-xr-sr-x 1 bin kmem 12288 Nov 16 10:57:09 1995 /usr/sbin/pppstats > -r-xr-sr-x 2 bin kmem 20480 Nov 16 10:57:10 1995 /usr/sbin/pstat > -r-sr-sr-x 3 root kmem 180224 Nov 16 10:59:26 1995 /usr/sbin/sendmail > -r-sr-xr-x 1 root bin 12288 Nov 16 10:57:25 1995 /usr/sbin/sliplogin > -r-xr-sr-x 1 bin kmem 12288 Nov 16 10:57:28 1995 /usr/sbin/slstat > -r-xr-sr-x 2 bin kmem 20480 Nov 16 10:57:10 1995 /usr/sbin/swapinfo > -r-sr-xr-x 1 root bin 20480 Nov 16 10:57:36 1995 /usr/sbin/timedc > -r-sr-xr-x 1 root bin 16384 Nov 16 10:57:37 1995 /usr/sbin/traceroute > -r-xr-sr-x 1 bin kmem 12288 Nov 16 10:57:38 1995 /usr/sbin/trpt checking for uids of 0: root 0 toor 0 --------------446B9B3D2781E494167EB0E7--