Date: Thu, 8 Jan 1998 13:25:50 -0500 (EST) From: Matt Behrens <matt@megaweapon.zigg.com> To: Bryan Swann <swann@nosc.mil> Cc: Lance Hartford <lhartfor@mtghouse.com>, freebsd-security@freebsd.org Subject: Re: /usr/bin/su modification time changing Message-ID: <Pine.BSF.3.96.980108132406.262B-100000@varda.local> In-Reply-To: <Pine.GSO.3.96.980108113554.1842B-100000@mailbox>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 8 Jan 1998, Bryan Swann wrote: > I believe there are three different times associated with each file, > creation time, last access time, last modification time. I assume your > message came from tripwire or a similar tool. You can use options to the > ls command to determine which of the times have changed. You may find > that you need to alter the 'time' your security check monitors for. Lance's message came from the nightly setuid diff check, which comes standard on all versions of FreeBSD I've used, at least. He should probably check into it, someone might be toying with it. (Alternatively, a make world might have updated it...) Matt Behrens <matt@zigg.com> | Support the anti-spam amendment! http://www.zigg.com/ | Visit http://www.cauce.org/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.980108132406.262B-100000>