I recently installed a new rpc.lockd in /usr/sbin (new version supplied by
Compaq). The installation was basically:
mv rpc.lockd rpc.lockd.old
cp rpc.lockd.new rpc.lockd
chown owner rpc.lockd
chmod perms rpc.lockd
When tripwire ran, it found lots of altered ctime on files, mostly (but not
exclusively) in /usr/sbin. The new ctimes were all about the same, and were
about the time of the change. Does this make sense, or do I need to worry
about something else causing the alterations?
The system is a DS20, 4.0F with latest patches, ADVFS.
Any thoughts?
Sheila
--
Sheila Hollenbaugh Sr. Computer System Administrator (O-)
Wright State University College of Engineering & Computer Science
Dayton, OH 45435 http://www.cs.wright.edu/people/staff/shollen/
shollen_at_cs.wright.edu Voice: (937) 775-5077 FAX: (937) 775-5009
They that weave networks shall be confounded. --Isaiah 19:9 (KJV)
Received on Fri Feb 09 2001 - 15:26:24 NZDT