RE: [cobalt-users] Possible hack?

[Matthias Pigulla <mp@xxxxxxxxxxxxx>]

> -----Original Message-----
>
> this possible trojans - new files changes in UID??
> 
> [root@ns admin]# find / -user root -perm -4000 -print
- 8< -

> Maybe being paranoid but this is a check recomended by CERT* Advisory
> CA-94.01
> to find new or modified setuid root files. Maybe you could 
> advise if this is

Well, I just ran this command on my brand-new-just-switched-on RaQ3 and had
almost exactly the same result.

I don't see why you should worry. Your find command just dumped all setuid
root files? You did not check wheter they are new or somehow changed.

Best regards,
Matthias
--

 w e b f a c t o r y   G m b H
   Matthias Pigulla <mp@xxxxxxxxxxxxx> - Geschaeftsfuehrer
   Lessingstr. 60 - D-53113 Bonn - Germany - www.webfactory.de
   Fon +49(0)228-9114455 - Fax +49(0)228-9114499 - ICQ 49185492