From "Practical Unix & Internet Security" (Garfinkel & Spafford) -- a
must read for all security folks -- on page 98 we learn that c
represents a character device (tty or printer) and b represents a block
device (disk, cd-rom, etc.). On page 119, we read that the S, in this
case, represents the SUID bit. That is, whoever executes search will
have the uid of the process set to 1 (the uid of the owner of search).
This is meaningless in this case because only uid 1 can execute search
anyway. Hope this helps.
renante wrote:
>
> Hi, I got this attributes to some of my web directory, last week I
> experienced remote connection denial.
> I was sure the remote IP address im using is in included in the access list.
> When I rebooted the machine, the attributes of following folder was change
> from drwxr__r__ to the one below:
>
> c--xrw---- 1 27745 8226 46, 119 Oct 28 2030 search
> b--Sr---w- 1 29812 24375 62, 34 Nov 19 2031 wap
>
> Any help will be highly appreciated.
>
> Rey Bontuyan
> www.inq7.net
--
---------------------------
Dan Ellis, Ph.D. student
MITRE Infosec Eng/Scientist
www.cs.ucsb.edu/~ellisd
(703) 883-5807
S/MIME Cryptographic Signature
