Re: /usr/bin/login patch question

From: Casper *** (Casper.***@Sun.COM)
Date: 12/27/01 

To: SecLists <lists@secure.stargate.net>
Date: Thu, 27 Dec 2001 19:47:28 +0100
From: Casper *** <Casper.***@Sun.COM>

>We installed the /usr/bin/login patch yesterday on a Solaris 7 box. This
>box is also running Tripwire... Well, this morning Tripwire tells me the
>following has changed on the system:
>
>changed: drwxrwxr-x root 1024 Aug 24 18:35:51 2000 /usr

This is an unfortunate side effect of the fact that patches always
include the permissions of all directories included in the patch.

It could be that 775 is the default S7 permission; the timestamp
would be taken from the S7-patch build environment.

Casper