I changed the timezone on my system. That night, I got the daily security check email, containing this: Checking setuid files and devices: arch20m.dellroad.org setuid diffs: 1,238c1,238 < 133 -r-sr-xr-x 1 root wheel 249576 Oct 9 07:44:10 2002 /bin/rcp < 1228 -r-xr-sr-x 1 root kmem 65944 Oct 9 07:45:20 2002 /sbin/ccdconfig < 1274 -r-sr-xr-x 1 root wheel 201836 Oct 9 07:45:27 2002 /sbin/ping < 1275 -r-sr-xr-x 1 root wheel 202816 Oct 9 07:45:27 2002 /sbin/ping6 < 1279 -r-sr-xr-x 1 root wheel 198488 Oct 9 07:45:28 2002 /sbin/route < 1284 -r-sr-x--- 1 root operator 168272 Oct 9 07:45:28 2002 /sbin/shutdown [ ... snip ... ] --- > 133 -r-sr-xr-x 1 root wheel 249576 Oct 9 05:44:10 2002 /bin/rcp > 1228 -r-xr-sr-x 1 root kmem 65944 Oct 9 05:45:20 2002 /sbin/ccdconfig > 1274 -r-sr-xr-x 1 root wheel 201836 Oct 9 05:45:27 2002 /sbin/ping > 1275 -r-sr-xr-x 1 root wheel 202816 Oct 9 05:45:27 2002 /sbin/ping6 > 1279 -r-sr-xr-x 1 root wheel 198488 Oct 9 05:45:28 2002 /sbin/route > 1284 -r-sr-x--- 1 root operator 168272 Oct 9 05:45:28 2002 /sbin/shutdown It thinks that the files have changed simply because their timestamps are shown in a different local time. Fix: List the timzones in GMT instead. How-To-Repeat: Change timezone, wait for security check email.
The fix to this problem - doing the timezone in GMT - is to add the line export TZ=GMT near the start of the /etc/periodic/security/100.chksetuid, which seems to be the only script in /etc/periodic/security that is doing an ls and checking for changes. <mike
For bugs matching the following criteria: Status: In Progress Changed: (is less than) 2014-06-01 Reset to default assignee and clear in-progress tags. Mail being skipped