Re: [cobalt-users] Signs That Your System May Have Been Compromised

[enrique <enriquevega@xxxxxxx>]

On Wednesday, August 15, 2001, at 05:18 PM, Dean Hall wrote:

> Who says these settings are a security problem?

Dean, I am the original poster. Here is some of the original post:

http://www.cert.org/tech_tips/intruder_detection_checklist.html#intro

I started reading and following the checks, and ended up stumped after 
the first check. Seems I have some files which have an incorrect set of 
permissions. The following files have -rwsr-xr-x set. Could someone on a 
RaQ3 enter the command "find / -user root -perm -4000 -print" and tell 
me if you are getting the same output? If these files have incorrect 
permissions, then what should the command be to change them to the 
correct permission?

Thank you for your feedback!

enrique