From: ktn (ktn@dodo.com.au)
Date: Wed Jun 09 2004 - 20:22:01 EDT
I did not get any response about any java issues, and thank Dave Mitchell
for pointing out to check for root's cron jobs (properly this time). ls -lc
shows the time the permissions changed, and it was indeed an obscure job
that I didn't think of before %-)
Original Q:
>
> Dear Managers,
>
> A weird thing keeps happening, i.e.
> /usr/j2se/jre/lib/sparc/
> /usr/j2se/jre/lib/sparc/client
> /usr/j2se/jre/lib/sparc/native_threads
>
> (just these directories, not the files in it) keeps changing the
owner&group
> to that of a specific user (the same person), seemingly on a daily basis.
> This happens even when I change the it back to root:other as it should
be.
> I've also updated from java 1.4.2_03 to 1.4.2_04-b05, in case it's a
> security flaw, but this still happens. I do not see any obvious jobs that
> this user is running that is doing this. Does anyone have any idea how to
> find out why this is happening?
Dave's response:
>
> Well for one thing, if you've changed the ownership to root, then only
> root can change it back to the user; so don't look at the jobs the user is
> running, look at the jobs root is running.
>
> ls -lc should show you the exact time the permissions changed; try to
> tie that in with the times of root cronjobs, and/or the last accessed
> times of binaries and scripts in /usr/bin, /usr/local/bin etc.
> You might want to turn on process accounting, which shows the name and
> time of termination of each process (man acct for more details).
________________________________________________
Message sent using Dodo
Internet Webmail Server
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:28:50 EDT