Subject: Re: insecurity report wtmpx and wtmp incorrect gid...
To: None <netbsd-users@netbsd.org>
From: Jason White <jdwhite@jdwhite.org>
List: netbsd-users
Date: 02/25/2006 06:10:39
On Fri, 24 Feb 2006 at 08:04, Peter Eisch <peter@boku.net> wrote:
>
>I've had to modify my /etc/newsyslog.conf to keep it from recurring.

If you have a source tree, look in src/etc/newsyslog.conf or 
./etc/newsyslog.conf in the etc.tgz install set.  The uid/gid had been 
updated to match what's in /etc/mtree/special.

#       $NetBSD: newsyslog.conf,v 1.18.6.2 2005/10/21 11:32:39 tron Exp $
#
# Configuration file for newsyslog(8).
[...]
/var/log/wtmp           root:utmp       664  7    *    168  ZBN
/var/log/wtmpx          root:utmp       664  7    *    168  ZBN
[...]

-Jason

-- 
Jason White <jdwhite@jdwhite.org>       Jabber: jdwhite(jabber.org)
http://www.jdwhite.org/~jdwhite                 jason.d.white(gmail.com)
PGP KeyID: 0x5290E477/A8A2 3FDB AB33 98EB ED74  EDAA F538 9A30 5290 E477