/usr/sbin/periodic security check changing date format

Mike Clarke jmc-freebsd2 at milibyte.co.uk
Fri Jul 2 11:48:55 UTC 2010


The daily security check run by /usr/sbin/periodic has started to change 
the date format when checking suid files with the result that all the 
files are flagged as changed.

On Wednesday I had the following ...

curlew.lan setuid diffs:
--- /var/log/setuid.today       2010-06-06 09:01:14.000000000 +0100
+++ /tmp/security.6Np9Q7Bn      2010-06-30 11:30:48.000000000 +0100
@@ -1,70 +1,70 @@
- 164937 -r-sr-xr-x  1 root    wheel         18560 Jun  1 18:34:35 
2010 /bin/rcp

[snip]

+ 164937 -r-sr-xr-x  1 root    wheel         18560  1 Jun 18:34:35 
2010 /bin/rcp

Anacron wasn't running yesterday so the next report was today when it 
switched back from "day month" to "month day"...

curlew.lan setuid diffs:
--- /var/log/setuid.today       2010-06-30 11:30:48.000000000 +0100
+++ /tmp/security.Y7M72oUL      2010-07-02 00:08:44.000000000 +0100
@@ -1,70 +1,70 @@
- 164937 -r-sr-xr-x  1 root    wheel         18560  1 Jun 18:34:35 
2010 /bin/rcp

[snip]

+ 164937 -r-sr-xr-x  1 root    wheel         18560 Jun  1 18:34:35 
2010 /bin/rcp

And I'm sure I haven't made any changes to the system in the last few 
days which might cause this format change.

-- 
Mike Clarke


More information about the freebsd-questions mailing list