[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ale] Cannot chown unowned files



Not knowing any better, I would suspect a very serious h4x0r problem; 
those are three binaries that you would definitely want to replace with 
pathologically-altered versions if you wanted to obfuscate what a 
machine was really doing or what it really had on it. 

C. Lee Davis wrote:

>I've got an odd situation.  Some of my files have changed ownership to
>an unknown user & group...
>
>  -rwxr-xr-x   1 122      114         39696 May  2 16:17 ls
>  -rwxr-xr-x   1 122      114         54152 May  2 15:54 netstat
>  -rwxr-xr-x   1 122      114         62920 May  2 12:39 ps
>
>There is no user 122 or group 114 on my system.  And I can't chown them
>back, even as root.
>
>  host bin # chown root ls
>  chown: changing ownership of `ls': Operation not permitted
>
>Anybody got any suggestions?
>  
>