I built new server from scratch running RH6.2 and have loaded up Tripwire.
It keeps telling me that the st_ctime has changed on damned near
everything in the /dev directory. I can't find a cron/at that would be
responsible for this and am concerned that it might be something slipping
through the LRP.
Does anyone know what this is? I'm very bothered that I cannot find the
source of this.
The Tripwire report is attached.
dbc.
--
David B. Cook, <[EMAIL PROTECTED]>
Linux -- up 10 days because it can.
12:20pm up 10 days, 16:36, 2 users, load average: 0.00, 0.00, 0.00
---------- Forwarded message ----------
Date: Mon, 15 Oct 2001 04:11:30 -0400
From: root <XXXXXXXXXXXXXXXXX>
To: XXXXXXXXXXXXXXXXX
Subject: File integrity report
Changed files/directories include:
added: -rw-r--r-- root 67784704 Oct 14 14:30:14 2001
/usr/local/CDImages/dbc_driverack_v1.32.iso
changed: crw-r----- root 0 Apr 17 15:53:27 1999 /dev/audio
changed: crw-r----- root 0 Apr 17 15:53:27 1999 /dev/audio1
changed: crw-r----- root 0 Apr 17 15:53:27 1999 /dev/dsp
changed: crw-r----- root 0 Apr 17 15:53:27 1999 /dev/dsp1
changed: crw------- root 0 Apr 12 11:42:43 1999 /dev/fb0
changed: crw------- root 0 Apr 12 11:42:43 1999 /dev/fb1
changed: crw------- root 0 Apr 12 11:47:14 1999 /dev/fb2
changed: crw------- root 0 Apr 12 11:47:18 1999 /dev/fb3
changed: crw------- root 0 Apr 12 11:47:30 1999 /dev/fb4
changed: crw------- root 0 Apr 12 11:47:45 1999 /dev/fb5
changed: crw------- root 0 Apr 12 11:47:56 1999 /dev/fb6
changed: crw------- root 0 Apr 12 11:48:04 1999 /dev/fb7
changed: brw-rw---- root 0 May 5 16:32:26 1998 /dev/fd0
changed: brw-rw---- root 0 May 5 16:32:26 1998 /dev/fd0D360
changed: brw-rw---- root 0 May 5 16:32:26 1998 /dev/fd0D720
changed: brw-rw---- root 0 May 5 16:32:26 1998 /dev/fd0H1440
changed: brw-rw---- root 0 May 5 16:32:26 1998 /dev/fd0H360
changed: brw-rw---- root 0 May 5 16:32:26 1998 /dev/fd0H720
changed: brw-rw---- root 0 May 5 16:32:26 1998 /dev/fd0d360
changed: brw-rw---- root 0 May 5 16:32:26 1998 /dev/fd0h1200
changed: brw-rw---- root 0 May 5 16:32:26 1998 /dev/fd0h360
changed: brw-rw---- root 0 May 5 16:32:26 1998 /dev/fd0h720
changed: brw-rw---- root 0 May 5 16:32:26 1998 /dev/fd1
changed: brw-rw---- root 0 May 5 16:32:26 1998 /dev/fd1D360
changed: brw-rw---- root 0 May 5 16:32:26 1998 /dev/fd1D720
changed: brw-rw---- root 0 May 5 16:32:26 1998 /dev/fd1H1440
changed: brw-rw---- root 0 May 5 16:32:26 1998 /dev/fd1H360
changed: brw-rw---- root 0 May 5 16:32:26 1998 /dev/fd1H720
changed: brw-rw---- root 0 May 5 16:32:26 1998 /dev/fd1d360
changed: brw-rw---- root 0 May 5 16:32:26 1998 /dev/fd1h1200
changed: brw-rw---- root 0 May 5 16:32:26 1998 /dev/fd1h360
changed: brw-rw---- root 0 May 5 16:32:26 1998 /dev/fd1h720
changed: brw------- root 0 May 5 16:32:26 1998 /dev/hda
changed: crw------- root 0 Apr 16 02:07:30 1999 /dev/js0
changed: crw------- root 0 Apr 16 02:07:34 1999 /dev/js1
changed: crw------- root 0 Apr 16 02:07:38 1999 /dev/js2
changed: crw------- root 0 Apr 16 02:07:42 1999 /dev/js3
changed: crw-r----- root 0 Apr 17 15:53:27 1999 /dev/midi0
changed: crw-r----- root 0 Apr 17 15:53:27 1999 /dev/midi00
changed: crw-r----- root 0 Apr 17 15:53:27 1999 /dev/midi01
changed: crw-r----- root 0 Apr 17 15:53:27 1999 /dev/midi02
changed: crw-r----- root 0 Apr 17 15:53:27 1999 /dev/midi03
changed: crw-r----- root 0 Apr 17 15:53:27 1999 /dev/midi1
changed: crw-r----- root 0 Apr 17 15:53:28 1999 /dev/midi2
changed: crw-r----- root 0 Apr 17 15:53:28 1999 /dev/midi3
changed: crw-r----- root 0 Apr 17 15:53:27 1999 /dev/mixer
changed: crw-r----- root 0 Apr 17 15:53:27 1999 /dev/mixer1
changed: crw------- root 0 Jan 28 16:59:06 2000 /dev/radio0
changed: crw------- root 0 Jan 28 16:59:06 2000 /dev/radio1
changed: crw-r----- root 0 Apr 17 15:53:27 1999 /dev/sequencer
changed: crw------- root 0 Oct 14 23:54:59 2001 /dev/tty1
changed: crw------- root 0 Oct 14 14:31:09 2001 /dev/tty2
changed: crw------- root 0 Jan 28 16:59:11 2000 /dev/vbi0
changed: crw------- root 0 Jan 28 16:59:11 2000 /dev/vbi1
changed: crw--w---- davidc 0 May 5 16:32:27 1998 /dev/vcs1
changed: crw--w---- root 0 May 5 16:32:27 1998 /dev/vcs2
changed: crw--w---- davidc 0 May 5 16:32:27 1998 /dev/vcsa1
changed: crw--w---- root 0 May 5 16:32:27 1998 /dev/vcsa2
changed: crw------- root 0 Jan 28 16:59:06 2000 /dev/video0
changed: crw------- root 0 Jan 28 16:59:06 2000 /dev/video1
changed: crw------- root 0 Jan 28 16:59:11 2000 /dev/vtx0
changed: crw------- root 0 Jan 28 16:59:11 2000 /dev/vtx1
changed: crw------- root 0 Jan 28 16:59:14 2000 /dev/winradio0
changed: crw------- root 0 Jan 28 16:59:14 2000 /dev/winradio1
changed: -rwx------ root 0 Oct 4 19:44:33 2001 /dev/gpmctl
changed: -rw------- root 512 Oct 14 23:00:21 2001 /etc/ssh2/random_seed
changed: -rw-r--r-- root 457 Oct 14 14:30:31 2001 /etc/mtab
changed: -rw------- root 512 Oct 14 23:00:21 2001 /etc/ssh_random_seed
changed: -rw------- root 423 Oct 5 20:09:50 2001 /etc/smbpasswd
### Attr Observed (what it is) Expected (what it should be)
### =========== ============================= =============================
/dev/audio
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/audio1
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/dsp
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/dsp1
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fb0
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fb1
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fb2
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fb3
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fb4
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fb5
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fb6
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fb7
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fd0
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fd0D360
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fd0D720
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fd0H1440
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fd0H360
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fd0H720
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fd0d360
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fd0h1200
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fd0h360
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fd0h720
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fd1
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fd1D360
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fd1D720
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fd1H1440
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fd1H360
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fd1H720
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fd1d360
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fd1h1200
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fd1h360
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/fd1h720
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/hda
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/js0
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/js1
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/js2
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/js3
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/midi0
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/midi00
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/midi01
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/midi02
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/midi03
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/midi1
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/midi2
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/midi3
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/mixer
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/mixer1
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/radio0
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/radio1
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/sequencer
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/tty1
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/tty2
st_ctime: Sun Oct 14 14:31:09 2001 Sun Oct 7 18:09:09 2001
/dev/vbi0
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/vbi1
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/vcs1
st_ctime: Sun Oct 14 23:52:44 2001 Mon Oct 8 10:06:59 2001
/dev/vcs2
st_ctime: Sun Oct 14 14:28:53 2001 Sun Oct 7 18:08:49 2001
/dev/vcsa1
st_ctime: Sun Oct 14 23:52:44 2001 Mon Oct 8 10:06:59 2001
/dev/vcsa2
st_ctime: Sun Oct 14 14:28:53 2001 Sun Oct 7 18:08:49 2001
/dev/video0
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/video1
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/vtx0
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/vtx1
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/winradio0
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/winradio1
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/dev/gpmctl
st_ctime: Sun Oct 14 23:54:59 2001 Mon Oct 8 10:07:13 2001
/etc/ssh2/random_seed
st_ctime: Sun Oct 14 23:00:21 2001 Thu Oct 11 10:27:05 2001
/etc/mtab
st_ino: 213023 212516
st_ctime: Sun Oct 14 14:30:31 2001 Mon Oct 8 08:41:38 2001
/etc/ssh_random_seed
st_ctime: Sun Oct 14 23:00:21 2001 Wed Oct 10 22:30:56 2001
/etc/smbpasswd
st_ctime: Thu Oct 11 23:13:26 2001 Thu Oct 11 09:53:29 2001
_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
