The daily security check run by /usr/sbin/periodic has started to change 
the date format when checking suid files with the result that all the 
files are flagged as changed.

On Wednesday I had the following ...

curlew.lan setuid diffs:
--- /var/log/setuid.today       2010-06-06 09:01:14.000000000 +0100
+++ /tmp/security.6Np9Q7Bn      2010-06-30 11:30:48.000000000 +0100
@@ -1,70 +1,70 @@
- 164937 -r-sr-xr-x  1 root    wheel         18560 Jun  1 18:34:35 
2010 /bin/rcp

[snip]

+ 164937 -r-sr-xr-x  1 root    wheel         18560  1 Jun 18:34:35 
2010 /bin/rcp

Anacron wasn't running yesterday so the next report was today when it 
switched back from "day month" to "month day"...

curlew.lan setuid diffs:
--- /var/log/setuid.today       2010-06-30 11:30:48.000000000 +0100
+++ /tmp/security.Y7M72oUL      2010-07-02 00:08:44.000000000 +0100
@@ -1,70 +1,70 @@
- 164937 -r-sr-xr-x  1 root    wheel         18560  1 Jun 18:34:35 
2010 /bin/rcp

[snip]

+ 164937 -r-sr-xr-x  1 root    wheel         18560 Jun  1 18:34:35 
2010 /bin/rcp

And I'm sure I haven't made any changes to the system in the last few 
days which might cause this format change.

-- 
Mike Clarke
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Reply via email to