[ale] Cannot chown unowned files
Jeff Hubbs
hbbs at comcast.net
Wed Aug 24 08:23:31 EDT 2005
Not knowing any better, I would suspect a very serious h4x0r problem;
those are three binaries that you would definitely want to replace with
pathologically-altered versions if you wanted to obfuscate what a
machine was really doing or what it really had on it.
C. Lee Davis wrote:
>I've got an odd situation. Some of my files have changed ownership to
>an unknown user & group...
>
> -rwxr-xr-x 1 122 114 39696 May 2 16:17 ls
> -rwxr-xr-x 1 122 114 54152 May 2 15:54 netstat
> -rwxr-xr-x 1 122 114 62920 May 2 12:39 ps
>
>There is no user 122 or group 114 on my system. And I can't chown them
>back, even as root.
>
> host bin # chown root ls
> chown: changing ownership of `ls': Operation not permitted
>
>Anybody got any suggestions?
>
>
More information about the Ale
mailing list