Re: [SLUG] SUID

[John Ferlito <johnf@xxxxxxxxxx>]

On Mon, Oct 02, 2000 at 05:22:50PM +1100, Howard Lowndes wrote:
> Can someone tell me how a program, which I know I setuid yesterday
> (specifically /usr/sbin/pppd) because the dialin complains that it won't
> work unless the user is root or its setuid, suddenly looses its setuid
> between this morning when it worked and this evening when it didn't.
> 
> No, I haven't been breached.
> 
> Bloody mysterious.

	hehe 10 to 1 ou're using debian :) There's a cronjob that runs every night called
suidmanager. Theres a main config file somewhere that startes what is supposed to be suid sgid.
The con runs nightly and makes sure that those and only those files are set and fixes everything else 
so it's not. If it finds ifferences it should enmail root. 

	That's my first guess anyway.


-- 
John