setuid

Josef Hrabec j.hrabec at jtp.cz
Mon Nov 26 16:54:23 CET 2001


Dobry den,
muj pocitac mi zacal posilat takoveto hlaseni a ja si s tim nevim rady.
Nevite prosim nekdo, kde bych mohl zacit hledat chybu?
Diky Pepa.





Checking setuid files and devices:
Syntax error: "(" unexpected
Syntax error: "(" unexpected
Syntax error: "(" unexpected
cmp: EOF on /var/run/_secure.26798


server.domena.cz setuid diffs:
1,69d0
< 29962 -r-xr-sr-x  1 root  operator   56892 Apr 21 09:05:46 2001 /bin/df
< 29975 -r-sr-xr-x  1 root  wheel     317400 Apr 21 09:13:35 2001 /bin/rcp
< 67419 -r-xr-sr-x  1 root  kmem       62792 Apr 21 09:08:02 2001
/sbin/ccdconfig
< 67425 -r-xr-sr-x  1 root  kmem       69512 Apr 21 09:08:03 2001
/sbin/dmesg
< 67488 -r-xr-sr-x  2 root  tty       329912 Apr 21 09:14:14 2001 /sbin/dump
< 67464 -r-sr-xr-x  1 root  wheel     196376 Apr 21 09:08:15 2001 /sbin/ping
< 67465 -r-sr-xr-x  1 root  bin       191380 Apr 21 09:08:15 2001
/sbin/ping6
< 67488 -r-xr-sr-x  2 root  tty       329912 Apr 21 09:14:14 2001
/sbin/rdump
< 67426 -r-xr-sr-x  2 root  tty       356520 Apr 21 09:14:18 2001
/sbin/restore
< 67469 -r-sr-xr-x  1 root  wheel     192484 Apr 21 09:08:16 2001
/sbin/route
< 67426 -r-xr-sr-x  2 root  tty       356520 Apr 21 09:14:18 2001
/sbin/rrestore
< 67474 -r-sr-x---  1 root  operator  165008 Apr 21 09:08:17 2001
/sbin/shutdown
<  8041 -r-sr-xr-x  4 root  wheel      19540 Apr 21 09:09:19 2001
/usr/bin/at
<  8041 -r-sr-xr-x  4 root  wheel      19540 Apr 21 09:09:19 2001
/usr/bin/atq
< 8041 -r-sr-xr-x  4 root  wheel  19540 Apr 21 09:09:19 2001 /usr/bin/atrm
< 8041 -r-sr-xr-x  4 root  wheel  19540 Apr 21 09:09:19 2001 /usr/bin/batch
< 8053 -r-sr-xr-x  6 root  wheel  32280 Apr 21 09:09:21 2001 /usr/bin/chfn
< 8053 -r-sr-xr-x  6 root  wheel  32280 Apr 21 09:09:21 2001 /usr/bin/chpass
< 8053 -r-sr-xr-x  6 root  wheel  32280 Apr 21 09:09:21 2001 /usr/bin/chsh
<   8247 -r-sr-xr-x  1 root  wheel    24508 Apr 21 09:09:59 2001
/usr/bin/crontab
<  7937 -r-sr-sr-x  1 uucp  dialer    123888 Apr 21 09:06:15 2001
/usr/bin/cu
< 8081 -r-xr-sr-x  1 root  kmem   13108 Apr 21 09:09:26 2001 /usr/bin/fstat
< 8096 -r-xr-sr-x  1 root  kmem    9832 Apr 21 09:09:27 2001 /usr/bin/ipcs
< 8102 -r-sr-xr-x  1 root  wheel    510 Apr 21 09:09:28 2001
/usr/bin/keyinfo
< 8103 -r-sr-xr-x  1 root  wheel   7444 Apr 21 09:09:28 2001
/usr/bin/keyinit
< 8120 -r-sr-xr-x  1 root  wheel   7004 Apr 21 09:09:31 2001 /usr/bin/lock
< 8123 -r-sr-xr-x  1 root  wheel  20436 Apr 21 09:14:06 2001 /usr/bin/login
<   8252 -r-sr-sr-x  1 root  daemon   23720 Apr 21 09:10:26 2001
/usr/bin/lpq
<   8253 -r-sr-sr-x  1 root  daemon   27304 Apr 21 09:10:26 2001
/usr/bin/lpr
<   8254 -r-sr-sr-x  1 root  daemon   22668 Apr 21 09:10:26 2001
/usr/bin/lprm
<  7995 -r-sr-xr-x  1 man   wheel      28512 Apr 21 09:06:46 2001
/usr/bin/man
< 8142 -r-xr-sr-x  1 root  kmem   85712 Apr 21 09:09:35 2001
/usr/bin/netstat
< 8144 -r-xr-sr-x  1 root  kmem    9936 Apr 21 09:09:35 2001
/usr/bin/nfsstat
< 8293 -r-sr-xr-x  2 root  wheel  30636 Apr 21 09:14:08 2001 /usr/bin/passwd
< 8157 -r-sr-xr-x  1 root  wheel  10440 Apr 21 09:09:37 2001 /usr/bin/quota
< 8152 -r-sr-xr-x  1 root  wheel  17564 Apr 21 09:14:09 2001 /usr/bin/rlogin
<   8161 -r-sr-xr-x  1 root  wheel    14748 Apr 21 09:14:10 2001
/usr/bin/rsh
<   8165 -r-sr-xr-x  1 root  wheel    11560 Apr 21 09:14:10 2001 /usr/bin/su
<   8180 -r-xr-sr-x  1 root  kmem     56144 Apr 21 09:09:41 2001
/usr/bin/systat
<   8188 -r-xr-sr-x  1 root  kmem     32344 Apr 21 09:09:42 2001
/usr/bin/top
<  7938 -r-sr-xr-x  1 uucp  wheel      88228 Apr 21 09:06:16 2001
/usr/bin/uucp
<  7940 -r-sr-xr-x  1 uucp  wheel      37312 Apr 21 09:06:16 2001
/usr/bin/uuname
<  7943 -r-sr-sr-x  1 uucp  dialer     96752 Apr 21 09:06:16 2001
/usr/bin/uustat
<  7945 -r-sr-xr-x  1 uucp  wheel      88844 Apr 21 09:06:16 2001
/usr/bin/uux
<   8213 -r-xr-sr-x  1 root  kmem     16368 Apr 21 09:09:47 2001
/usr/bin/vmstat
<   8215 -r-xr-sr-x  1 root  tty       9040 Apr 21 09:09:47 2001
/usr/bin/wall
<   8223 -r-xr-sr-x  1 root  tty       7500 Apr 21 09:09:48 2001
/usr/bin/write
< 8053 -r-sr-xr-x  6 root  wheel  32280 Apr 21 09:09:21 2001 /usr/bin/ypchfn
< 8053 -r-sr-xr-x  6 root  wheel  32280 Apr 21 09:09:21 2001
/usr/bin/ypchpass
< 8053 -r-sr-xr-x  6 root  wheel  32280 Apr 21 09:09:21 2001 /usr/bin/ypchsh
< 8293 -r-sr-xr-x  2 root  wheel  30636 Apr 21 09:14:08 2001
/usr/bin/yppasswd
< 539652 -r-sr-xr-x  1 root  wheel   398740 Apr 21 09:10:28 2001
/usr/libexec/sendmail/sendmail
< 555524 -r-sr-sr-x  1 uucp  dialer  220704 Apr 21 09:06:15 2001
/usr/libexec/uucp/uucico
< 555525 -r-sr-s---  1 uucp  uucp     99584 Apr 21 09:06:17 2001
/usr/libexec/uucp/uuxqt
< 675036 -r-sr-xr-x  1 root  wheel    82962 Oct 25 14:36:01 2001
/usr/local/bin/ipastat
< 571443 -r-xr-sr-x  1 root  kmem      4664 Apr 21 09:10:01 2001
/usr/sbin/ifmcstat
< 571445 -r-xr-sr-x  1 root  kmem      9608 Apr 21 09:10:01 2001
/usr/sbin/iostat
< 571561 -r-xr-sr-x  1 root  daemon    30196 Apr 21 09:10:25 2001
/usr/sbin/lpc
< 571464 -r-sr-xr-x  1 root  wheel    16348 Apr 21 09:10:04 2001
/usr/sbin/mrinfo
< 571466 -r-sr-xr-x  1 root  wheel    29896 Apr 21 09:10:05 2001
/usr/sbin/mtrace
< 571604 -r-sr-xr--  1 root  network  295124 Apr 21 09:10:16 2001
/usr/sbin/ppp
< 571605 -r-sr-xr-x  1 root  wheel     95388 Apr 21 09:10:16 2001
/usr/sbin/pppd
< 571502 -r-xr-sr-x  2 root  kmem     14808 Apr 21 09:10:16 2001
/usr/sbin/pstat
< 571525 -r-sr-x---  1 root  network   11112 Apr 21 09:10:19 2001
/usr/sbin/sliplogin
< 571502 -r-xr-sr-x  2 root  kmem      14808 Apr 21 09:10:16 2001
/usr/sbin/swapinfo
< 571533 -r-sr-xr-x  1 root  wheel     15112 Apr 21 09:10:20 2001
/usr/sbin/timedc
< 571534 -r-sr-xr-x  1 root  wheel     13168 Apr 21 09:10:20 2001
/usr/sbin/traceroute
< 571535 -r-sr-xr-x  1 root  bin       14952 Apr 21 09:10:20 2001
/usr/sbin/traceroute6
< 571536 -r-xr-sr-x  1 root  kmem       8040 Apr 21 09:10:20 2001
/usr/sbin/trpt



Removing stale files from /var/preserve:
ldlibfind.so: .!-name.-mtime+7-delete-print: No such file or directory

Cleaning out old system announcements:

Removing stale files from /var/rwho:
ldlibfind.so: .!-name.-mtime+7-delete-print: No such file or directory




More information about the Users-l mailing list