It turns out that our new virus-scanning software changes the ctime of files
when it scans them. So it had nothing to do with the lockd at all.
Sheila
Original query:
On Feb 9, 10:24am, Sheila Hollenbaugh wrote:
> Subject: Altered ctime, why?
> I recently installed a new rpc.lockd in /usr/sbin (new version supplied by
> Compaq). The installation was basically:
>
> mv rpc.lockd rpc.lockd.old
> cp rpc.lockd.new rpc.lockd
> chown owner rpc.lockd
> chmod perms rpc.lockd
>
> When tripwire ran, it found lots of altered ctime on files, mostly (but not
> exclusively) in /usr/sbin. The new ctimes were all about the same, and were
> about the time of the change. Does this make sense, or do I need to worry
> about something else causing the alterations?
>
> The system is a DS20, 4.0F with latest patches, ADVFS.
>
> Any thoughts?
>
> Sheila
>
>-- End of excerpt from Sheila Hollenbaugh
--
Sheila Hollenbaugh Sr. Computer System Administrator (O-)
Wright State University College of Engineering & Computer Science
Dayton, OH 45435 http://www.cs.wright.edu/people/staff/shollen/
shollen_at_cs.wright.edu Voice: (937) 775-5077 FAX: (937) 775-5009
They that weave networks shall be confounded. --Isaiah 19:9 (KJV)
Received on Fri Feb 09 2001 - 15:41:43 NZDT