From owner-freebsd-security Tue Dec 16 16:51:25 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id QAA16915 for security-outgoing; Tue, 16 Dec 1997 16:51:25 -0800 (PST) (envelope-from owner-freebsd-security) Received: from ohio.river.org (river.org [209.24.233.15]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id QAA16910 for ; Tue, 16 Dec 1997 16:51:20 -0800 (PST) (envelope-from dhawk@ohio.river.org) Received: (from dhawk@localhost) by ohio.river.org (8.8.8/8.7.3) id QAA14100 for freebsd-security@freebsd.org; Tue, 16 Dec 1997 16:51:08 -0800 (PST) From: David Hawkins Message-Id: <199712170051.QAA14100@ohio.river.org> Subject: Is this something to worry about? To: freebsd-security@freebsd.org Date: Tue, 16 Dec 1997 16:51:08 -0800 (PST) X-Mailer: ELM [version 2.4 PL23] Content-Type: text Sender: owner-freebsd-security@freebsd.org X-Loop: FreeBSD.org Precedence: bulk Background: today I did a make and install in /usr/ports/x11/XFree86 and XFree86-contrib and I thought I hadn't touched /usr/bin but noticed this later in the day: -r-xr-xr-x 1 bin bin 123 Dec 6 07:02 linux -r-xr-xr-x 1 bin bin 122 Dec 6 07:02 qcam -r-xr-xr-x 1 bin bin 16384 Dec 16 05:00 tail -r-xr-xr-x 1 bin bin 126976 Dec 16 10:55 awk -r-xr-xr-x 1 bin bin 12288 Dec 16 11:35 du That the last three files there were modified today. I'm not aware of anything on the system that would have modified 'tail' at 5am. Going to go by that Make book right now so I can figure some of this out on my own. ;-) Thanks for any feedback, though. later, david -- David Hawkins -- dhawk@river.org http://www.river.org If you take the small view, the universe is just something small and round, like those water-filled balls which produce a miniature snowstorm when you shake them. Although, unless the ineffable plan is a lot more ineffable than it's given credit for, it does not have a large plastic snowman at the bottom. -- (Terry Pratchett & Neil Gaiman, Good Omens)