Security Run Output Setuid Differences
PeterPluta
peter at placidpublishing.net
Mon May 21 18:34:27 UTC 2007
I did a lot of port hacking yesterday. By that I mean screwing up and redoing
lots of things. Anyway, I woke up today to find this email in my inbox.
Checking setuid files and devices:
mail.placidpublishing.net setuid diffs:
--- /var/log/setuid.today Fri May 18 03:02:47 2007
+++ /tmp/security.207RUJmY Mon May 21 03:02:30 2007
@@ -3,7 +3,6 @@
70745 -r-sr-xr-x 1 root wheel 21792 Jul 30 16:19:55 2006 /sbin/ping
70746 -r-sr-xr-x 1 root wheel 28660 Jul 30 16:19:55 2006 /sbin/ping6
70721 -r-sr-x--- 1 root operator 10148 Jul 30 16:19:56 2006
/sbin/shutdown
-165583 -rws--x--x 1 root wheel 268432 Apr 14 14:05:10 2007
/usr/X11R6/bin/xterm
377219 -r-sr-xr-x 6 root wheel 17532 Jul 30 16:19:56 2006
/usr/bin/chfn
377219 -r-sr-xr-x 6 root wheel 17532 Jul 30 16:19:56 2006
/usr/bin/chpass
377219 -r-sr-xr-x 6 root wheel 17532 Jul 30 16:19:56 2006
/usr/bin/chsh
@@ -19,9 +18,9 @@
377219 -r-sr-xr-x 6 root wheel 17532 Jul 30 16:19:56 2006
/usr/bin/ypchpass
377219 -r-sr-xr-x 6 root wheel 17532 Jul 30 16:19:56 2006
/usr/bin/ypchsh
377398 -r-sr-xr-x 2 root wheel 5828 Jul 30 16:19:57 2006
/usr/bin/yppasswd
-72750 -rwsr-xr-x 1 root wheel 285580 Nov 2 01:21:29 2006
/usr/local/bin/screen
-71569 -rwxr-sr-x 1 root kmem 112708 Feb 3 17:17:26 2007
/usr/local/sbin/lsof
-71923 -rwxr-sr-x 1 root maildrop 142559 May 17 14:41:47 2007
/usr/local/sbin/postdrop
-71924 -rwxr-sr-x 1 root maildrop 152477 May 17 14:41:47 2007
/usr/local/sbin/postqueue
+71112 -rwsr-xr-x 1 root wheel 285580 May 20 18:23:48 2007
/usr/local/bin/screen
+70971 -rwxr-sr-x 1 root kmem 112708 May 20 18:23:03 2007
/usr/local/sbin/lsof
+73170 -rwxr-sr-x 1 root maildrop 142559 May 17 14:41:47 2007
/usr/local/sbin/postdrop
+73204 -rwxr-sr-x 1 root maildrop 152477 May 17 14:41:47 2007
/usr/local/sbin/postqueue
923168 -rwxr-sr-x 1 root smmsp 5236 Jul 30 16:20:07 2006
/usr/sbin/mailwrapper
923264 -r-sr-x--- 1 root network 11636 Jul 30 16:20:07 2006
/usr/sbin/sliplogin
What exactly does this all mean? Specifically the @@ -19,9 +18,9 @@ stuff.
Also, why did this all of a sudden appear?
--
View this message in context: http://www.nabble.com/Security-Run-Output-Setuid-Differences-tf3792025.html#a10724342
Sent from the freebsd-questions mailing list archive at Nabble.com.
More information about the freebsd-questions
mailing list