Re: Tripwire problem (st_ctime) - Thanks
From: Martin Glora (mnglora@bonanza.physik.uni-wuerzburg.de)Date: 01/31/02
- Next message: Simon Green: "Re: cannot restore original file after attack"
- Previous message: Roland Wammers: "Re: cannot restore original file after attack"
- In reply to: Juha Laiho: "Re: Tripwire problem (st_ctime)"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Martin Glora <mnglora@bonanza.physik.uni-wuerzburg.de> Date: Thu, 31 Jan 2002 10:09:05 +0100
Hi,
> Martin Glora <martin@glora.de> said:
> >Then I get:
> >
> >/root/bin/backupscript.tar
> > st_ctime: Tue Jan 29 00:45:45 2002 Mon Jan 28 00:45:30 2002
> >
> >to all (!) files that tripwire checks.
> ...
>
> From "man 2 stat":
>
> The field st_ctime is changed by writing or by setting
> inode information (i.e., owner, group, link count, mode,
> etc.).
>
> Running backups would be one thing that only changes st_ctime.
on my system it was an anti-virus software, and "-c" helped!
Thanks
Martin
- Next message: Simon Green: "Re: cannot restore original file after attack"
- Previous message: Roland Wammers: "Re: cannot restore original file after attack"
- In reply to: Juha Laiho: "Re: Tripwire problem (st_ctime)"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]