Subject: Re: insecurity report wtmpx and wtmp incorrect gid...
To: Gilles Gravier <Gilles@Gravier.org>
From: Water NB <netbsd78@126.com>
List: netbsd-users
Date: 02/24/2006 15:58:17
--mP3DRpeJDSE+ciuQ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

I guess your /va/log/wtmp is: group name=3Dwheel

see also /etc/mtree/special:
in 1.82.2.6, wtmp and wtmpx changed to gname=3Dutmp
so you should keep sync with it.

On Fri, Feb 24, 2006 at 06:51:33AM +0100, Gilles Gravier wrote:
> Hi!
>=20
> Ever since I moved to NetBSD 3.0, in my daily insecurity report, I get=20
> the following :
>=20
> Checking special files and directories.
> var/log/wtmpx:=20
> 	gid (45, 0)
> var/log/wtmp:=20
> 	gid (45, 0)
>=20
>=20
>=20
> Now, even if I change these files manually back to GID 45, the next day=
=20
> they again get changed back to GID 0.
>=20
> What is responsible for this change? How can I prevent it?
>=20
> Thanks in advance,
> Gilles.



--mP3DRpeJDSE+ciuQ
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.1 (NetBSD)

iD8DBQFD/ryZNbX1TGZvxFURArL8AJ9kof7ake2b5OcmvaAN+c6MS/5X2wCdFz34
EjG5H60LMkiXn/SFhUoIClE=
=AwJi
-----END PGP SIGNATURE-----

--mP3DRpeJDSE+ciuQ--