[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[ale] Cannot chown unowned files
- Subject: [ale] Cannot chown unowned files
- From: hbbs at comcast.net (Jeff Hubbs)
- Date: Wed, 24 Aug 2005 12:23:31 +0000
- In-reply-to: <[email protected]>
- References: <[email protected]>
Not knowing any better, I would suspect a very serious h4x0r problem;
those are three binaries that you would definitely want to replace with
pathologically-altered versions if you wanted to obfuscate what a
machine was really doing or what it really had on it.
C. Lee Davis wrote:
>I've got an odd situation. Some of my files have changed ownership to
>an unknown user & group...
>
> -rwxr-xr-x 1 122 114 39696 May 2 16:17 ls
> -rwxr-xr-x 1 122 114 54152 May 2 15:54 netstat
> -rwxr-xr-x 1 122 114 62920 May 2 12:39 ps
>
>There is no user 122 or group 114 on my system. And I can't chown them
>back, even as root.
>
> host bin # chown root ls
> chown: changing ownership of `ls': Operation not permitted
>
>Anybody got any suggestions?
>
>