On Thu, 21 Apr 2016 19:30:15 +0200 Andreas Metzler wrote:
> On 2016-04-20 Roman Bulakh wrote:
> > On 2016-03-27 Andreas Metzler wrote:
> >> On 2016-03-21 Roman Bulakh wrote:
> >>> Package: exim4
> >>> Version:
On 2016-04-20 Roman Bulakh wrote:
> On 2016-03-27 Andreas Metzler wrote:
>> On 2016-03-21 Roman Bulakh wrote:
>>> Package: exim4
>>> Version: 4.80-7+deb7u2
>>> After updates exim to version 4.80-7+deb7u2 exim.c change CWD dir to /
On 2016-03-21 Roman Bulakh wrote:
> Package: exim4
> Version: 4.80-7+deb7u2
> After updates exim to version 4.80-7+deb7u2 exim.c change CWD dir to /
> on startup.
> Checking cwd=/some/vay was a popular heuristic for
> identifying the source of malware sending email.
>
Package: exim4
Version: 4.80-7+deb7u2
After updates exim to version 4.80-7+deb7u2 exim.c change CWD dir to /
on startup.
Checking cwd=/some/vay was a popular heuristic for
identifying the source of malware sending email.
The output would look something like this:
2016-03-04 11:46:22 cwd=/root
4 matches
Mail list logo