LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Debian (https://www.linuxquestions.org/questions/debian-26/)
-   -   Strange file size and permissions in /usr/sbin (https://www.linuxquestions.org/questions/debian-26/strange-file-size-and-permissions-in-usr-sbin-449263/)

phyrster 05-28-2006 04:20 AM

Strange file size and permissions in /usr/sbin
 
I noticed that under /usr/sbin, there are some files with very strange file size and permissions. This is the output when I run

Code:

ls -hal|grep T
total 4.3T
?-w---xrwT 33261 root root  40T 2006-05-18 23:43 exicyclog
?-w--w---T 33261 root root  18T 2006-05-18 23:43 exigrep
?-w---sr-x 33261 root root  19T 2006-05-18 23:43 exim_checkaccess
?-w-r-S--- 33261 root root 291T 2006-05-18 23:43 exim_convert4r4
?-w---s-wx 33261 root root  48T 2006-05-18 23:43 exim_lock
?--xrws--- 33261 root root 493T 2006-05-18 23:43 eximstats
?-w---Sr-x 33261 root root 203T 2006-05-18 23:43 exipick
?-w---Srwx 33261 root root  19T 2006-05-18 23:43 exiqgrep
?-w---s--- 33261 root root  16T 2006-05-18 23:43 exiqsumm
-r-s---rwt 33261 root root  18T 2006-02-05 23:33 install-sgmlcatalog
--wSr--r-t 33261 root root  42T 2006-05-23 22:30 invoke-rc.d
---SrwSrwx 33261 root root  52T 2006-04-19 23:30 orphaner
---s--xr-- 33261 root root  36T 2006-05-19 07:56 pppstats
-r-S-w--wT 33261 root root 7.6T 2006-02-05 23:31 update-ca-certificates
-r-s---r-t 33261 root root  23T 2006-04-19 21:10 update-catalog
-rws-w-rw- 33261 root root 3.4T 2006-05-18 23:39 update-pango-modules
-rws-w-rwx 33261 root root 9.0T 2006-05-18 23:39 update-pangox-aliases

What is causing this? Is my system compromised?

rch 05-28-2006 04:48 AM

Many of your files are hardlinks(the strange s in permission field) and clearly
either your filesystem is reporting incorrect filesize(solution:fsck) or there is problem in tty(solution:reset)

MasterC 05-28-2006 04:53 AM

Please do not post the same thread in more than one forum. Picking the most relevant forum and posting it once there makes it easier for other members to help you and keeps the discussion all in one place.

http://www.linuxquestions.org/rules.php

Post follow ups here:

http://www.linuxquestions.org/questi...42#post2266142

Closed


All times are GMT -5. The time now is 08:26 PM.