|
Matt Bishop Office: 2209 Watershed Sciences Phone: +1 (530) 752-8060 Email: mabishop@ucdavis.edu |
Version of April 20, 2021 at 10:43PM
The following is part of the output from ls -sailF /bin /usr/sbin. What is suspicious about it?
64236 168 -r-xr-xr-x 1 root 160028 Mar 24 20:53 /bin/csh* 64293 192 -r-xr-xr-x 2 root 180816 Mar 24 20:58 /bin/ksh* 309710 88 -r-xr-xr-x 3 root 3111236 Apr 2 03:05 /bin/sh* . . . 309872 144 -r-xr-xr-x 1 root 137984 Apr 19 14:58 /usr/sbin/named* 309704 9 -r-xr-xr-x 1 root 8532 Mar 24 20:56 /usr/sbin/rexecd* 309705 10 -r-xr-xr-x 1 root 9672 Mar 24 20:56 /usr/sbin/rlogind* 309707 10 -r-xr-xr-x 1 root 9836 Mar 24 20:56 /usr/sbin/rshd* 309710 304 -r-xr-xr-x 3 root 3111236 Apr 2 03:05 /usr/sbin/sshd*
|
ECS 135, Computer Security Version of April 20, 2021 at 10:43PM
|
You can also obtain a PDF version of this.
|