Pessoal, uma d�vida... pela primeira vez vejo essa mensagem gerada pelo �ltimo periodic daily ele acusa uma diferen�a de setuid em /bin e /sbin. N�o fiz nenhuma altera��o nesse servidor nos ultimos 15dias. Confiri tamanho, data, direitos e owners com outro box e aparentemente est�o iguais. Ser� q trata-se de um problema de seguran�a? ou t� babando? []s Toledo
Date: Thu, 27 Mar 2003 03:17:20 -0300 (BRT) From: Charlie Root <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: server.meudominio.com security run output server.meudominio.com Checking setuid files and devices: setuid diffs: 1,49c1,50 < 21699 -r-sr-xr-x 1 root wheel 251476 Feb 23 20:45:32 2003 /bin/rcp < 22394 -r-xr-sr-x 1 root kmem 66248 Feb 23 20:46:57 2003 /sbin/ccdconfig < 22441 -r-sr-xr-x 1 root wheel 203868 Feb 23 20:47:08 2003 /sbin/ping < 22442 -r-sr-xr-x 1 root wheel 206504 Feb 23 20:47:08 2003 /sbin/ping6 < 22450 -r-sr-x--- 1 root operator 168704 Feb 23 20:47:11 2003 /sbin/shutdown < 88593 -r-sr-xr-x 4 root wheel 19616 Feb 23 20:47:51 2003 /usr/bin/at .. > 582137 -r-sr-xr-x 1 root wheel 15348 Mar 26 18:53:23 2003 /usr/sbin/timedc > 582145 -r-sr-xr-x 1 root wheel 13604 Mar 26 18:53:23 2003 /usr/sbin/traceroute > 582149 -r-sr-xr-x 1 root wheel 15688 Mar 26 18:53:23 2003 /usr/sbin/traceroute6 > 582152 -r-xr-sr-x 1 root kmem 8040 Mar 26 18:53:23 2003 /usr/sbin/trpt Checking for uids of 0: root 0
_______________________________________________________________ Sair da Lista: http://www2.fugspbr.org/mailman/listinfo/fugspbr Historico: http://www4.fugspbr.org/lista/html/FUG-BR/
