On Mon, Jan 19, 2009 at 12:59:39PM -, Scott James Remnant wrote:
> On Mon, 2009-01-19 at 12:38 +, Matt Zimmerman wrote:
>
> > > The /dev/.udev/db have been touched as well, which heavily implies that
> > > udev was triggered.
> > >
> > > With the rules being moved, it is possible that the
On Mon, 2009-01-19 at 12:38 +, Matt Zimmerman wrote:
> > The /dev/.udev/db have been touched as well, which heavily implies that
> > udev was triggered.
> >
> > With the rules being moved, it is possible that the trigger would reset
> > the permissions to 0660.
>
> Why would a trigger set th
On Mon, 2009-01-19 at 12:59 +, Scott James Remnant wrote:
> > I'm currently grepping through the package contents for anything suspicious.
> > One thing which caught my eye was the new LSB init script dependency
> > comments (e.g. Required-Start: udev in pcmciautils). Could these have
> > cau
On Mon, Jan 19, 2009 at 12:01:23PM -, Scott James Remnant wrote:
> On Mon, 2009-01-19 at 08:51 +, Matt Zimmerman wrote:
>
> > > Do you think something might have actually done "find | chmod" and
> > > escaped and run across /dev for some reason?
> >
> > I've looked around the filesystem a
On Mon, 2009-01-19 at 08:51 +, Matt Zimmerman wrote:
> > Do you think something might have actually done "find | chmod" and
> > escaped and run across /dev for some reason?
>
> I've looked around the filesystem a bit, and nothing looks out of the
> ordinary outside of /dev.
>
> You can see i
On Mon, Jan 19, 2009 at 08:01:29AM -, Scott James Remnant wrote:
> Strange that every single device has lost its world ownership
> permission; the only ones I note with it left are:
>
> 232040680 srw-rw-rw- 1 root root0 Jan 16 15:12 /dev/log
> 58620 crw-rw-rw- 1 r