SUMMARY: /etc/path_to_inst and pti.old changed...
2007-12-25 0:29:00
> My security software reported that the /etc/path_to_inst and
> /etc/path_to_inst.old files changed on an old sparc5 running well-patched
> Solaris 8. Sure enough, the timestamps on both files were changed.
> However, no one with root access was logged on at the time, nothing was
> going on in root's cron at the time, no patching was going on, and no
> hardware was added or removed. Since both files are exactly the same
> size and have the same contents, I cannot diff the old and the new file
> to see what might have changed.
>
> I am at a loss for why these two files might have changed. Can anyone
> suggest a reason for a change in these files that I have missed? TIA,
> and I will summarize.
+-----------------------------------------------------------------------+
| Christopher L. Barnard O When I was a boy I was told that |
| cbarnard at tsg.cbot.com / \ anybody could become president. |
| (312) 347-4901 O---O Now I'm beginning to believe it. |
| http://www.cs.uchicago.edu/~cbarnard --Clarence Darrow |
+----------PGP public key available via finger or PGP keyserver---------+
Comments
Got something to say?
You must be logged in to post a comment.
