On Wed, 12 Mar 2003, Volker Kindermann wrote:

> Hi Dru,
>
>
> > I was reading my daily output on a 4.7-RELEASE and noticed the
> > following user was created:
> >
> > > sfs:*:71:
> >
> > as well as the following groups:
> >
> > < nogroup:*:65533:
> > < nobody:*:65534:
> > < sfs:*:71:
>
> IMHO sfs has nothing to do with tripwire. A quick search on google
> showed a software sfs (networking file system). Have a look here:
>
> http://www.ugcs.caltech.edu/info/sfs/sfs_toc.html


I know, that's all I could find myself. So, I have no clue why that
user/groups showed up out of the blue. I was sorta hoping it had something
to do with tripwire...

Anyone heard of any exploits that create the above?

Dru

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message

Reply via email to