From: Christopher L. Barnard (cbar44@tsg.cbot.com)
Date: Mon Jan 27 2003 - 09:55:39 EST
My security software reported that the /etc/path_to_inst and
/etc/path_to_inst.old files changed on an old sparc5 running well-patched
Solaris 8. Sure enough, the timestamps on both files were changed.
However, no one with root access was logged on at the time, nothing was
going on in root's cron at the time, no patching was going on, and no
hardware was added or removed. Since both files are exactly the same
size and have the same contents, I cannot diff the old and the new file
to see what might have changed.
I am at a loss for why these two files might have changed. Can anyone
suggest a reason for a change in these files that I have missed? TIA,
and I will summarize.
+-----------------------------------------------------------------------+
| Christopher L. Barnard O When I was a boy I was told that |
| cbarnard@tsg.cbot.com / \ anybody could become president. |
| (312) 347-4901 O---O Now I'm beginning to believe it. |
| http://www.cs.uchicago.edu/~cbarnard --Clarence Darrow |
+----------PGP public key available via finger or PGP keyserver---------+
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:25:43 EDT