Re: Re: Strange file atttributes
Aceď‘˝-Z via iLoad7
Re: Strange file atttributes
Am running 2.4.22 kernel on to Debian boxes and notice today that if I run an lsattr in the /bin and /sbin dir some of the files are coming up with strange attributes. I had some problems recently while trying to upgrade a package. dpkg kept getting Operation not permitted while trying to execute a script. Turned out that my ext3 filesystem had some very nice looking corruption (files with permissions ?rw?rwx--t and such!!!). touch /forcefsck, reboot a few times, fix everything. Very odd... -- Ben Pearre http://hebb.mit.edu/~ben Keep your email private: http://www.gnupg.org My ID: CFDA6CDA -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Strange file atttributes
Am running 2.4.22 kernel on to Debian boxes and notice today that if I run an lsattr in the /bin and /sbin dir some of the files are coming up with strange attributes. I had some problems recently while trying to upgrade a package. dpkg kept getting Operation not permitted while trying to execute a script. Turned out that my ext3 filesystem had some very nice looking corruption (files with permissions ?rw?rwx--t and such!!!). touch /forcefsck, reboot a few times, fix everything. Very odd... -- Ben Pearre http://hebb.mit.edu/~ben Keep your email private: http://www.gnupg.org My ID: CFDA6CDA
Re: Strange file atttributes
On Thu, Jan 15, 2004 at 03:45:05PM +0200, Craig Schneider wrote: Hi Guys Am running 2.4.22 kernel on to Debian boxes and notice today that if I run an lsattr in the /bin and /sbin dir some of the files are coming up with strange attributes. Any ideas why ? Or has the box more than lightly been exploited ? depends what you mean by strange, this may come in handy: http://www.knowngoods.org/ Online hash database. It's a database of MD5 and SHA-1 hashs for standard OS files for various versions of FreeBSD, Linux, Mac OSX, and Solaris. on one of my computers (a dev box) I have ---c-- for all the sbin files on another I have st for some of the files and exclusive -- on another. the attributes don't look evil, I'm not sure exactly how they where changed, but their md5sums check out okay. // George -- GEORGE GEORGALIS, System Admin/Architectcell: 646-331-2027IXOYE Security Services, Web, Mail,mailto:[EMAIL PROTECTED] Multimedia, DB, DNS and Metrics. http://www.galis.org/george -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Strange file atttributes
Hi Guys Am running 2.4.22 kernel on to Debian boxes and notice today that if I run an lsattr in the /bin and /sbin dir some of the files are coming up with strange attributes. Any ideas why ? Or has the box more than lightly been exploited ? Any help would be greatly appreciated at this time. Craig -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Strange file atttributes
Hi Guys Am running 2.4.22 kernel on to Debian boxes and notice today that if I run an lsattr in the /bin and /sbin dir some of the files are coming up with strange attributes. Any ideas why ? Or has the box more than lightly been exploited ? Any help would be greatly appreciated at this time. Craig
Re: Strange file atttributes
On Thu, Jan 15, 2004 at 03:45:05PM +0200, Craig Schneider wrote: Hi Guys Am running 2.4.22 kernel on to Debian boxes and notice today that if I run an lsattr in the /bin and /sbin dir some of the files are coming up with strange attributes. Any ideas why ? Or has the box more than lightly been exploited ? depends what you mean by strange, this may come in handy: http://www.knowngoods.org/ Online hash database. It's a database of MD5 and SHA-1 hashs for standard OS files for various versions of FreeBSD, Linux, Mac OSX, and Solaris. on one of my computers (a dev box) I have ---c-- for all the sbin files on another I have st for some of the files and exclusive -- on another. the attributes don't look evil, I'm not sure exactly how they where changed, but their md5sums check out okay. // George -- GEORGE GEORGALIS, System Admin/Architectcell: 646-331-2027IXOYE Security Services, Web, Mail,mailto:[EMAIL PROTECTED] Multimedia, DB, DNS and Metrics. http://www.galis.org/george
