> On 13:28 23 Feb 2002, Rupendra Singh <[EMAIL PROTECTED]> wrote:
> | thanks that solved the problem
> | permissions were:
> |     -rwx------    1 root     root        46224 Aug 28 13:16
>
> Good.
>
> | but how did it happen i never entered the /lib dirctory as root
>
> A mystery. But this is what you must find out so that you can
> prevent it happening again.
>
> | bye the way i am running squirrelmail as webmail and i have
> observed | that some of my squirrelmail users became owners of
> some randomly | choosen files in /bin and /usr/bin. i cannot
> doubt these users and | they do not have shell access.
>
> I would guess some bug or hole in the webmail side of things.
> Such an app often runs with root privileges for at least part of
> its operation (in order to become whichever user is access the
> email)
> and as such has the power to do arbitrary things anywhere on the
> system by accident if badly coded.
>
> Which files were getting changed?

ls
df
free
netstat
ifconfig





_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to