Re: FreeBSD VM gremlin

[imp () VILLAGE ORG (Warner Losh)]

In message <199809171449.KAA12350 () zygorthian-space-raiders mit edu> "Charles M. Hannum" writes:
: I'm sure I'll get lots of flames for forwarding this, but there's been
: a lot of talk about this problem lately, and it definitely has serious
: security implications; even if it turns out to be the case that the
: contents of the file aren't modified, having the time stamp
: pseudo-randomly change would make just about any sysadmin go into a
: fit of paranoia.

This is a well known bug in the FreeBSD VM layer.  The contents of the
file do not change.

You should have md5 checksums of files that you are concerned about,
as timestamps are useless in the face of a good attacker.

I don't know why he had a crash, he doesn't say what it was...

Warner