--QVzQgM+zdZ3YWXqn
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, Feb 13, 2004 at 01:40:54PM +0100, Manuel Bouyer wrote:
> This is the only directory that seems affected. Other users's .ssh direct=
ory
> behaves the expected way, as well as other 2-level paths.
> This worked properly up to yesterday evening (I noticed because ssh's
> /root/.ssh/authorized_keys is now rejected by the server, which also means
> the problem isn't in /bin/pwd but somewhere else) and as far as
> I know nothing changed on this server.

Do you have an off-local-disk copy of your mtree database?

(Even if you don't, yet, make a backup now on removable media after
copying it to a system that you know you can trust--probably by
installing fresh on it right now--and then run mtree.)

This smells like an exploit to me, but I'm paranoid.

--=20
gabriel rosenkoetter
gr@eclipsed.net

--QVzQgM+zdZ3YWXqn
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (NetBSD)

iD8DBQFALPG29ehacAz5CRoRAo9gAJ4zjNsftQYi4rgvjVvS2E8Xod6PZwCgn5JT
BNVGHf01CWrDEqn0JnXONsI=
=RxpB
-----END PGP SIGNATURE-----

--QVzQgM+zdZ3YWXqn--