RE: [cobalt-users] RAQ4 Some system files change ex: ls, top, netstat, login What's wrong ?

["Paul Shuttleworth" <paul@xxxxxxxxxxxxxx>]

> [root /bin]# ls -la ls netstat ps login
> -rwxr-xr-x   1 root     root        21672 Jun 20  2000 login
> -rwxr-xr-x   1 root     root        50148 Sep  9  1999 ls
> -rwxr-xr-x   1 root     root        80632 Jun 14  2000 netstat
> -r-xr-xr-x   1 root     root        60080 Mar  7  2000 ps
> [root /bin]# cd /usr/bin
> [root bin]# ls -la du killall pstree top
> -rwxr-xr-x   1 root     root        21716 Sep  9  1999 du
> -rwxr-xr-x   1 root     root        10160 Feb  5  2000 killall
> -rwxr-xr-x   1 root     root        11376 Feb  5  2000 pstree
> -r-xr-xr-x   1 root     root        34896 Mar  7  2000 top
> [root bin]# cd /sbin
> [root /sbin]# ls -la syslogd
> -rwxr-xr-x   1 root     root        27112 Sep 27  2000 syslogd


Output from a Raq4R

[root /root]# cd /bin
[root /bin]# ls -la ls netstat ps login
-rwxr-xr-x   1 root     root        21672 Jun 20  2000 login
-rwxr-xr-x   1 root     root        50148 Sep  9  1999 ls
-rwxr-xr-x   1 root     root        80632 Jun 14  2000 netstat
-r-xr-xr-x   1 root     root        60080 Mar  7  2000 ps
[root /bin]# cd /usr/bin
[root bin]# ls -la du killall pstree top
-rwxr-xr-x   1 root     root        21716 Sep  9  1999 du
-rwxr-xr-x   1 root     root        10160 Feb  5  2000 killall
-rwxr-xr-x   1 root     root        11376 Feb  5  2000 pstree
-r-xr-xr-x   1 root     root        34896 Mar  7  2000 top
[root bin]# cd /sbin
[root /sbin]# ls -la syslogd
-rwxr-xr-x   1 root     root        27112 Sep 27  2000 syslogd
[root /sbin]#

As you can see mine are identical to Fraggas and I am 99.999999% sure I have
not been hacked.

Paul.