freebsd-update IDS

Mike Clarke jmc-freebsd2 at milibyte.co.uk
Sat Oct 27 11:23:37 UTC 2012


I've installed 9.1-RC2 after using svn to download /usr/src. Shortly after 
rebooting into the new system, and just out of curiosity, I 
ran "freebsd-update IDS" and was surprised to see that it reported 735 hash 
mismatches. Some of these were for files modified locally like /etc/hosts but 
the majority were for files that I've not changed, e.g.

/usr/bin/clang-cpp has SHA256 hash 
8937eebfc2bd2d18d05b786a568fbff980cf1b5a7333b8133cb197e7cd48ffcc, but should 
have SHA256 hash 
36b39d8f00b1c5aab193d594ff67bfdb7a382b2bdb5b30c824254e9d658fbf8c.

Are svn and freebsd-update looking at different versions of the system or do I 
have a problem? Considering the very short time interval between installing 
the system and checking IDS I'm quite confident my system hasn't been hacked 
from outside.

-- 
Mike Clarke


More information about the freebsd-questions mailing list