Date:        Mon, 20 Oct 2003 10:55:35 +0200
    From:        =3D?iso-8859-1?Q?Jonas_Lind=3DE9n?=3D <jonas.linden.7469=
@student.uu.se>
    Message-ID:  <000001c396e7$ecf273f0$0100a8c0@orrholmsvagen>

  | Am I being hacked in some way?

I doubt it - while most hackers are pretty stupid, doing that kind of
very visible chmod gains them nothing (they'd have to be root to do it,
and if they're root, they don't need to chmod the directory to change
things in it).

More likely there's something about your setup that is causing the
chmod to happen.

Next time you notice it has changed, before touching anything else,
do
	ls -lctd /etc/mail

which will tell you the time the directory was last altered.   Given
the nature of that directory, that is likely to be the time the chmod
happened.   Then look and see what else is happening at around that
time (from cron, or whatever).

kre