April 21, 2021 Opener


The following is part of the output from ls -sailF /bin /usr/sbin. What is suspicious about it?


 64236	168  -r-xr-xr-x	1  root	 160028	Mar 24 20:53	/bin/csh*
 64293	192  -r-xr-xr-x	2  root	 180816	Mar 24 20:58	/bin/ksh*
309710	 88  -r-xr-xr-x	3  root	3111236	Apr  2 03:05	/bin/sh*
. . .
309872	144  -r-xr-xr-x	1  root	 137984	Apr 19 14:58	/usr/sbin/named*
309704	  9  -r-xr-xr-x	1  root	   8532	Mar 24 20:56	/usr/sbin/rexecd*
309705	 10  -r-xr-xr-x	1  root	   9672	Mar 24 20:56	/usr/sbin/rlogind*
309707	 10  -r-xr-xr-x	1  root	   9836	Mar 24 20:56	/usr/sbin/rshd*
309710  304  -r-xr-xr-x	3  root	3111236	Apr  2 03:05	/usr/sbin/sshd*


UC Davis sigil
Matt Bishop
Office: 2209 Watershed Sciences
Phone: +1 (530) 752-8060
Email: [email protected]
ECS 135, Computer Security
Version of April 20, 2021 at 10:43PM

You can also obtain a PDF version of this.

Valid HTML 4.01 Transitional Built with BBEdit Built on a Macintosh