Subject: Re: wierd log
To: Manuel Bouyer <bouyer@antioche.lip6.fr>
From: Andrei Zaitsau <mertis@ameritech.net>
List: netbsd-users
Date: 03/18/2001 07:31:08
----- Original Message -----
From: "Manuel Bouyer" <bouyer@antioche.lip6.fr>
To: "Andrei Zaitsau" <mertis@ameritech.net>
Cc: <netbsd-users@netbsd.org>
Sent: Sunday, March 18, 2001 3:27 AM
Subject: Re: wierd log


> On Sat, Mar 17, 2001 at 02:00:21PM -0800, Andrei Zaitsau wrote:
> > Hello Everyone,
> > I just have found kinda wierd log... Or may be I just don't understand
> > something...
> > Log is:
> >  Mar 17 12:32:13 APACH uustat: /etc/pwd.db: Permission denied
> >
> > Does it mean some one was messing around in the system?
>
> Hum, do you have uucp running on this system ? If not then maybe someone
> tried to exploit some kind of bug in uustat ...
>
> --
> Manuel Bouyer <bouyer@antioche.eu.org>
> --
Okay,
I believe I have found a problem...
Accidently, I have removed user uucp from the system.
So may be some program was trying to use it, but as far user does not exist
it denyed access to /etc/pwd.db
Or this is not the reason?