Re: Re: Strange file atttributes
Ace👽-Z via iLoad7
Re: Strange file atttributes
> Am running 2.4.22 kernel on to Debian boxes and notice today that if I > run an lsattr in > the /bin and /sbin dir some of the files are coming up with strange > attributes. I had some problems recently while trying to upgrade a package. dpkg kept getting "Operation not permitted" while trying to execute a script. Turned out that my ext3 filesystem had some very nice looking corruption (files with permissions "?rw?rwx--t" and such!!!). touch /forcefsck, reboot a few times, fix everything. Very odd... -- Ben Pearre http://hebb.mit.edu/~ben Keep your email private: http://www.gnupg.org My ID: CFDA6CDA
Re: Strange file atttributes
> Am running 2.4.22 kernel on to Debian boxes and notice today that if I > run an lsattr in > the /bin and /sbin dir some of the files are coming up with strange > attributes. I had some problems recently while trying to upgrade a package. dpkg kept getting "Operation not permitted" while trying to execute a script. Turned out that my ext3 filesystem had some very nice looking corruption (files with permissions "?rw?rwx--t" and such!!!). touch /forcefsck, reboot a few times, fix everything. Very odd... -- Ben Pearre http://hebb.mit.edu/~ben Keep your email private: http://www.gnupg.org My ID: CFDA6CDA -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Strange file atttributes
On Thu, Jan 15, 2004 at 03:45:05PM +0200, Craig Schneider wrote: >Hi Guys > >Am running 2.4.22 kernel on to Debian boxes and notice today that if I >run an lsattr in >the /bin and /sbin dir some of the files are coming up with strange >attributes. > >Any ideas why ?> Or has the box more than lightly been exploited ? depends what you mean by strange, this may come in handy: http://www.knowngoods.org/ Online hash database. It's a database of MD5 and SHA-1 hashs for standard OS files for various versions of FreeBSD, Linux, Mac OSX, and Solaris. on one of my computers (a dev box) I have ---c-- for all the sbin files on another I have st for some of the files and exclusive -- on another. the attributes don't look evil, I'm not sure exactly how they where changed, but their md5sums check out okay. // George -- GEORGE GEORGALIS, System Admin/Architectcell: 646-331-2027< Security Services, Web, Mail,mailto:[EMAIL PROTECTED] Multimedia, DB, DNS and Metrics. http://www.galis.org/george
Re: Strange file atttributes
On Thu, Jan 15, 2004 at 03:45:05PM +0200, Craig Schneider wrote: >Hi Guys > >Am running 2.4.22 kernel on to Debian boxes and notice today that if I >run an lsattr in >the /bin and /sbin dir some of the files are coming up with strange >attributes. > >Any ideas why ?> Or has the box more than lightly been exploited ? depends what you mean by strange, this may come in handy: http://www.knowngoods.org/ Online hash database. It's a database of MD5 and SHA-1 hashs for standard OS files for various versions of FreeBSD, Linux, Mac OSX, and Solaris. on one of my computers (a dev box) I have ---c-- for all the sbin files on another I have st for some of the files and exclusive -- on another. the attributes don't look evil, I'm not sure exactly how they where changed, but their md5sums check out okay. // George -- GEORGE GEORGALIS, System Admin/Architectcell: 646-331-2027< Security Services, Web, Mail,mailto:[EMAIL PROTECTED] Multimedia, DB, DNS and Metrics. http://www.galis.org/george -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
