OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Corvin Russell (corvinrsympatico.ca)
Date: Tue Jun 05 2001 - 11:20:09 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi--

    My weekly security check script shows this change among others.
     
    - -rwxr-sr-x 1 root maildrop 77277 May 7 00:08 /usr/sbin/postdrop
    + -rwxr-sr-x 1 root maildrop 77277 May 31 02:16 /usr/sbin/postdrop
     
    I believe the postdrop binary is a postfix binary. I have not updated
    postfix recently, is this binary associated with anything else? Or is
    there another benign explanation for the change? Here's another weird
    thing, compare my /usr/sbin:

    -rwxr-xr-x 1 root root 104008 Jan 19 06:23 /usr/sbin/postalias
    -rwxr-xr-x 1 root root 28207 Jan 19 06:23 /usr/sbin/postcat
    -rwxr-xr-x 1 root root 116871 Jan 19 06:23 /usr/sbin/postconf
    -rwxr-sr-x 1 root maildrop 77277 Jan 19 06:23 /usr/sbin/postdrop
    -rwxr-xr-x 1 root root 53373 Jan 19 06:23 /usr/sbin/postfix
    -rwxr-xr-x 1 root root 55853 Jan 19 06:23 /usr/sbin/postkick
    -rwxr-xr-x 1 root root 59079 Jan 19 06:23 /usr/sbin/postlock
    -rwxr-xr-x 1 root root 54588 Jan 19 06:23 /usr/sbin/postlog
    -rwxr-xr-x 1 root root 97626 Jan 19 06:23 /usr/sbin/postmap
    -rwxr-xr-x 1 root root 62761 Jan 19 06:23 /usr/sbin/postsuper

    TIA

    Corvin

    -- 
    Corvin Russell <corvinrsympatico.ca>
    

    - To unsubscribe, send mail to majordomopostfix.org with content (not subject): unsubscribe postfix-users