su to root denied?

[Kris Kennaway]

On Wed, Dec 06, 2006 at 09:08:18PM -0600, Paul Schmehl wrote:
> --On December 6, 2006 9:42:41 PM -0500 Kris Kennaway <kris at obsecurity.org> 
> wrote:
> 
> >On Wed, Dec 06, 2006 at 07:52:50PM -0600, john Mish III wrote:
> >>I get this error message when I try to su to anything, either from root
> >>or  to root, and I don't know why.
> >>$ su
> >>su: not running setuid
> >
> >Somehow your su application lost its setuid bit.  Instead of blinding
> >chmodding it you may want to be careful and replace it with a known
> >good binary in case someone overwrote it somehow.
> >
> Or he's been hacked, and he needs to proceed very cautiously....

That's what I was alluding to, yes.  Files don't randomly lose setuid
bits unless *something* is going on, although there are mundane
explanations also.

Kris
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20061207/20e215de/attachment.pgp