From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1G0yxe-0003GT-HT for garchives@archives.gentoo.org; Thu, 13 Jul 2006 11:02:26 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.7/8.13.6) with SMTP id k6DB1Cj3011222; Thu, 13 Jul 2006 11:01:12 GMT Received: from hu-out-0102.google.com (hu-out-0102.google.com [72.14.214.193]) by robin.gentoo.org (8.13.7/8.13.6) with ESMTP id k6DAsX5Y015135 for ; Thu, 13 Jul 2006 10:54:33 GMT Received: by hu-out-0102.google.com with SMTP id 16so196445hue for ; Thu, 13 Jul 2006 03:54:33 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=Bs6SP4+xN5DOGYjnHnzE3JWkO0lqLY3ecY+xbywkk36AWRwPUPQwnKM1w8JeED6vxUfu6hFvhi6y9Sv09ycdq+ofP+dku/FaxFHbLisW0YY1YoPd5OF+9x1Fh2GGx9mNwoBzjExUn7qNphPyLriatsabdHj/sbbtaeuF3ZSnnK8= Received: by 10.54.132.9 with SMTP id f9mr776239wrd; Thu, 13 Jul 2006 03:54:33 -0700 (PDT) Received: by 10.70.124.12 with HTTP; Thu, 13 Jul 2006 03:54:33 -0700 (PDT) Message-ID: <358eca8f0607130354u3a0d7713s30d5fe7348786921@mail.gmail.com> Date: Thu, 13 Jul 2006 06:54:33 -0400 From: Mick To: gentoo-user@lists.gentoo.org Subject: [gentoo-user] Re: hardened: setuid In-Reply-To: Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <200607122053.32609.michaelkintzios@gmail.com> X-Archives-Salt: fecc930f-b8f8-4215-a5cf-3253691f33b6 X-Archives-Hash: 76ca98d29b08976489bd78ce73267d67 On 12/07/06, James wrote: > I have not seen any indication of comprimise. > Yes the system had redhat some years ago. It's entirely possible the same > partition table was used and therefore these residual files are artifacts > of a previous installation. My googling did not find any thing. > > Where did you find out they are redhat files? Have a look here: http://rpmfind.net/linux/RPM/Red_Hat_Contrib-Net__rhcn-bugs_redhat.com_.html http://web.mit.edu/ist/topics/linux/linux-athena.html http://web.mit.edu/ist/topics/athena/differences.html I have found that re-using partitions without zeroing them first, using e.g. dd, or without making a new fs over them ends up in old files being suddenly resurrected . . . -- Regards, Mick -- gentoo-user@gentoo.org mailing list