Return to BSD News archive
Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!simtel!vtc.tacom.army.mil!agis!news.jersey.net!zeus.jersey.net!bherd From: bherd@zeus.jersey.net (Bil Herd) Newsgroups: comp.unix.bsd.bsdi.misc,comp.mail.misc,comp.mail.sendmail Subject: Re: daily insecurity output Followup-To: comp.unix.bsd.bsdi.misc,comp.mail.misc,comp.mail.sendmail Date: 24 Sep 1995 04:24:17 GMT Organization: InterActive Network - Serving SNJ - SLIP/PPP/SHELL Lines: 24 Message-ID: <442mhh$s09@hermes.jersey.net> References: <43s7er$g3c@despina.neptune.com> <43t0bs$jct@news.cais.com> NNTP-Posting-Host: zeus.jersey.net X-Newsreader: TIN [version 1.2 PL2] Xref: euryale.cc.adfa.oz.au comp.unix.bsd.bsdi.misc:943 comp.mail.misc:22208 comp.mail.sendmail:20445 Jim Sloan (jsloan@livnet.com) wrote: : In article <43s7er$g3c@despina.neptune.com>, : tom@neptune.com (Tom Techoueyres) wrote: : > : >Checking home directories: : >user mario home directory is owned by maria : >user coco2020 home directory is owned by 121 : >user daniel home directory is owned by 122 : <---- more of the same -> : >user alina home directory is owned by 122 : >user bruce home directory is owned by 123 : > : Yes, : It means someone with root access edited either the /usr/home/* : directories, or the user ID's in the /etc/passwd file (more than likely the : latter). You need to go and chown all the user directories and the files : within them as well as the /var/mail/* files to the correct user. You get this if you delette a user without removing their home directory and then add a user with the same name. Bil Herd