*BSD News Article 51470


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!simtel!vtc.tacom.army.mil!agis!news.jersey.net!zeus.jersey.net!bherd
From: bherd@zeus.jersey.net (Bil Herd)
Newsgroups: comp.unix.bsd.bsdi.misc,comp.mail.misc,comp.mail.sendmail
Subject: Re: daily insecurity output
Followup-To: comp.unix.bsd.bsdi.misc,comp.mail.misc,comp.mail.sendmail
Date: 24 Sep 1995 04:24:17 GMT
Organization: InterActive Network - Serving SNJ - SLIP/PPP/SHELL
Lines: 24
Message-ID: <442mhh$s09@hermes.jersey.net>
References: <43s7er$g3c@despina.neptune.com> <43t0bs$jct@news.cais.com>
NNTP-Posting-Host: zeus.jersey.net
X-Newsreader: TIN [version 1.2 PL2]
Xref: euryale.cc.adfa.oz.au comp.unix.bsd.bsdi.misc:943 comp.mail.misc:22208 comp.mail.sendmail:20445

Jim Sloan (jsloan@livnet.com) wrote:
: In article <43s7er$g3c@despina.neptune.com>,
:    tom@neptune.com (Tom Techoueyres) wrote:
: >
: >Checking home directories:
: >user mario home directory is owned by maria
: >user coco2020 home directory is owned by 121
: >user daniel home directory is owned by 122
: <---- more of the same ->
: >user alina home directory is owned by 122
: >user bruce home directory is owned by 123
: >

: Yes,
:    It means someone with root access edited either the /usr/home/* 
: directories, or the user ID's in the /etc/passwd file (more than likely the 
: latter).  You need to go and chown all the user directories and the files 
: within them as well as the /var/mail/* files to the correct user.


You get this if you delette a user without removing their home directory
and then add a user with the same name.

Bil Herd