warden.int.autonlab.org daily security run output

punosevac72 at gmail.com punosevac72 at gmail.com
Thu Oct 15 03:06:42 EDT 2015


Checking setuid files and devices:

warden.int.autonlab.org setuid diffs:
--- /var/log/setuid.today	2015-09-09 03:03:59.000000000 -0400
+++ /tmp/security.9Va3dPZ3	2015-10-15 03:03:53.048253647 -0400
@@ -44,51 +44,51 @@
    234 -r-sr-xr-x  1 root  wheel      28424 Nov 11 16:03:41 2014 /iocage/base/10.1-RELEASE/root/usr/sbin/traceroute
     59 -r-sr-xr-x  1 root  wheel      23976 Nov 11 16:03:41 2014 /iocage/base/10.1-RELEASE/root/usr/sbin/traceroute6
    209 -r-xr-sr-x  1 root  kmem       11608 Nov 11 16:03:41 2014 /iocage/base/10.1-RELEASE/root/usr/sbin/trpt
-    19 -r-sr-xr-x  1 root  wheel      19440 Aug 24 12:24:30 2015 /iocage/base/10.2-RELEASE/root/bin/rcp
-    16 -r-sr-xr--  1 root  operator    9984 Aug 12 11:27:14 2015 /iocage/base/10.2-RELEASE/root/sbin/mksnap_ffs
-   102 -r-sr-xr-x  1 root  wheel      28080 Aug 12 11:27:15 2015 /iocage/base/10.2-RELEASE/root/sbin/ping
-   104 -r-sr-xr-x  1 root  wheel      40648 Aug 12 11:27:15 2015 /iocage/base/10.2-RELEASE/root/sbin/ping6
-    14 -r-sr-xr--  2 root  operator   15712 Aug 12 11:27:15 2015 /iocage/base/10.2-RELEASE/root/sbin/poweroff
-    14 -r-sr-xr--  2 root  operator   15712 Aug 12 11:27:15 2015 /iocage/base/10.2-RELEASE/root/sbin/shutdown
-    50 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/at
-    50 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/atq
-    50 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/atrm
-    50 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/batch
-   253 -r-xr-sr-x  1 root  kmem       13104 Aug 12 11:27:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/btsockstat
-    21 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/chfn
-    21 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/chpass
-    21 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/chsh
-    96 -r-sr-xr-x  1 root  wheel      32296 Aug 24 12:24:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/crontab
-   157 -r-sr-xr-x  1 root  wheel      11496 Aug 12 11:27:33 2015 /iocage/base/10.2-RELEASE/root/usr/bin/lock
-   241 -r-sr-xr-x  1 root  wheel      25256 Aug 24 12:24:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/login
-   237 -r-sr-sr-x  1 root  daemon     33072 Aug 12 11:27:44 2015 /iocage/base/10.2-RELEASE/root/usr/bin/lpq
-   326 -r-sr-sr-x  1 root  daemon     38576 Aug 12 11:27:44 2015 /iocage/base/10.2-RELEASE/root/usr/bin/lpr
-   266 -r-sr-sr-x  1 root  daemon     32896 Aug 12 11:27:44 2015 /iocage/base/10.2-RELEASE/root/usr/bin/lprm
-   310 -r-xr-sr-x  1 root  kmem      146552 Aug 12 11:27:34 2015 /iocage/base/10.2-RELEASE/root/usr/bin/netstat
-   352 -r-sr-xr-x  1 root  wheel       6776 Aug 24 12:24:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/opieinfo
-   210 -r-sr-xr-x  1 root  wheel      13400 Aug 24 12:24:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/opiepasswd
-   174 -r-sr-xr-x  2 root  wheel       7928 Aug 24 12:24:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/passwd
-   136 -r-sr-xr-x  1 root  wheel      15712 Aug 12 11:27:34 2015 /iocage/base/10.2-RELEASE/root/usr/bin/quota
-   367 -r-sr-xr-x  1 root  wheel      15192 Aug 24 12:24:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/rlogin
-   192 -r-sr-xr-x  1 root  wheel      11168 Aug 24 12:24:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/rsh
-    95 -r-sr-xr-x  1 root  wheel      17200 Aug 24 12:24:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/su
-    74 -r-xr-sr-x  1 root  tty        16144 Aug 12 11:27:37 2015 /iocage/base/10.2-RELEASE/root/usr/bin/wall
-   296 -r-xr-sr-x  1 root  tty        12080 Aug 12 11:27:38 2015 /iocage/base/10.2-RELEASE/root/usr/bin/write
-    21 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/ypchfn
-    21 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/ypchpass
-    21 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/ypchsh
-   174 -r-sr-xr-x  2 root  wheel       7928 Aug 24 12:24:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/yppasswd
-    71 -r-xr-sr-x  1 root  smmsp     696888 Aug 12 11:27:47 2015 /iocage/base/10.2-RELEASE/root/usr/libexec/sendmail/sendmail
-    39 -r-sr-xr-x  1 root  wheel      39040 Aug 12 11:27:17 2015 /iocage/base/10.2-RELEASE/root/usr/libexec/ssh-keysign
-    36 -r-sr-xr-x  1 root  wheel       6072 Aug 12 11:27:02 2015 /iocage/base/10.2-RELEASE/root/usr/libexec/ulog-helper
-    15 -r-sr-sr-x  2 root  authpf     24216 Aug 12 11:27:39 2015 /iocage/base/10.2-RELEASE/root/usr/sbin/authpf
-    15 -r-sr-sr-x  2 root  authpf     24216 Aug 12 11:27:39 2015 /iocage/base/10.2-RELEASE/root/usr/sbin/authpf-noip
-    19 -r-xr-sr-x  1 root  daemon     55936 Aug 12 11:27:44 2015 /iocage/base/10.2-RELEASE/root/usr/sbin/lpc
-   146 -r-sr-xr--  1 root  network   416120 Aug 12 11:27:46 2015 /iocage/base/10.2-RELEASE/root/usr/sbin/ppp
-    13 -r-sr-xr-x  1 root  wheel      21040 Aug 12 11:27:47 2015 /iocage/base/10.2-RELEASE/root/usr/sbin/timedc
-   141 -r-sr-xr-x  1 root  wheel      32696 Aug 12 11:27:47 2015 /iocage/base/10.2-RELEASE/root/usr/sbin/traceroute
-   170 -r-sr-xr-x  1 root  wheel      23976 Aug 12 11:27:47 2015 /iocage/base/10.2-RELEASE/root/usr/sbin/traceroute6
-   245 -r-xr-sr-x  1 root  kmem       11608 Aug 12 11:27:47 2015 /iocage/base/10.2-RELEASE/root/usr/sbin/trpt
+    58 -r-sr-xr-x  1 root  wheel      19440 Oct 14 20:46:30 2015 /iocage/base/10.2-RELEASE/root/bin/rcp
+   113 -r-sr-xr--  1 root  operator    9984 Aug 12 11:27:14 2015 /iocage/base/10.2-RELEASE/root/sbin/mksnap_ffs
+   199 -r-sr-xr-x  1 root  wheel      28080 Aug 12 11:27:15 2015 /iocage/base/10.2-RELEASE/root/sbin/ping
+   201 -r-sr-xr-x  1 root  wheel      40648 Aug 12 11:27:15 2015 /iocage/base/10.2-RELEASE/root/sbin/ping6
+   111 -r-sr-xr--  2 root  operator   15712 Aug 12 11:27:15 2015 /iocage/base/10.2-RELEASE/root/sbin/poweroff
+   111 -r-sr-xr--  2 root  operator   15712 Aug 12 11:27:15 2015 /iocage/base/10.2-RELEASE/root/sbin/shutdown
+   434 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/at
+   434 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/atq
+   434 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/atrm
+   434 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/batch
+   637 -r-xr-sr-x  1 root  kmem       13104 Aug 12 11:27:30 2015 /iocage/base/10.2-RELEASE/root/usr/bin/btsockstat
+   405 -r-sr-xr-x  6 root  wheel      21768 Oct 14 20:46:31 2015 /iocage/base/10.2-RELEASE/root/usr/bin/chfn
+   405 -r-sr-xr-x  6 root  wheel      21768 Oct 14 20:46:31 2015 /iocage/base/10.2-RELEASE/root/usr/bin/chpass
+   405 -r-sr-xr-x  6 root  wheel      21768 Oct 14 20:46:31 2015 /iocage/base/10.2-RELEASE/root/usr/bin/chsh
+   480 -r-sr-xr-x  1 root  wheel      32296 Oct 14 20:46:31 2015 /iocage/base/10.2-RELEASE/root/usr/bin/crontab
+   541 -r-sr-xr-x  1 root  wheel      11496 Aug 12 11:27:33 2015 /iocage/base/10.2-RELEASE/root/usr/bin/lock
+   625 -r-sr-xr-x  1 root  wheel      25256 Oct 14 20:46:31 2015 /iocage/base/10.2-RELEASE/root/usr/bin/login
+   621 -r-sr-sr-x  1 root  daemon     33072 Aug 12 11:27:44 2015 /iocage/base/10.2-RELEASE/root/usr/bin/lpq
+   710 -r-sr-sr-x  1 root  daemon     38576 Aug 12 11:27:44 2015 /iocage/base/10.2-RELEASE/root/usr/bin/lpr
+   650 -r-sr-sr-x  1 root  daemon     32896 Aug 12 11:27:44 2015 /iocage/base/10.2-RELEASE/root/usr/bin/lprm
+   694 -r-xr-sr-x  1 root  kmem      144600 Oct 14 20:46:31 2015 /iocage/base/10.2-RELEASE/root/usr/bin/netstat
+   736 -r-sr-xr-x  1 root  wheel       6776 Oct 14 20:46:31 2015 /iocage/base/10.2-RELEASE/root/usr/bin/opieinfo
+   594 -r-sr-xr-x  1 root  wheel      13400 Oct 14 20:46:31 2015 /iocage/base/10.2-RELEASE/root/usr/bin/opiepasswd
+   558 -r-sr-xr-x  2 root  wheel       7928 Oct 14 20:46:31 2015 /iocage/base/10.2-RELEASE/root/usr/bin/passwd
+   520 -r-sr-xr-x  1 root  wheel      15712 Aug 12 11:27:34 2015 /iocage/base/10.2-RELEASE/root/usr/bin/quota
+   751 -r-sr-xr-x  1 root  wheel      15192 Oct 14 20:46:31 2015 /iocage/base/10.2-RELEASE/root/usr/bin/rlogin
+   576 -r-sr-xr-x  1 root  wheel      11168 Oct 14 20:46:31 2015 /iocage/base/10.2-RELEASE/root/usr/bin/rsh
+   479 -r-sr-xr-x  1 root  wheel      17200 Oct 14 20:46:31 2015 /iocage/base/10.2-RELEASE/root/usr/bin/su
+   458 -r-xr-sr-x  1 root  tty        16144 Aug 12 11:27:37 2015 /iocage/base/10.2-RELEASE/root/usr/bin/wall
+   680 -r-xr-sr-x  1 root  tty        12080 Aug 12 11:27:38 2015 /iocage/base/10.2-RELEASE/root/usr/bin/write
+   405 -r-sr-xr-x  6 root  wheel      21768 Oct 14 20:46:31 2015 /iocage/base/10.2-RELEASE/root/usr/bin/ypchfn
+   405 -r-sr-xr-x  6 root  wheel      21768 Oct 14 20:46:31 2015 /iocage/base/10.2-RELEASE/root/usr/bin/ypchpass
+   405 -r-sr-xr-x  6 root  wheel      21768 Oct 14 20:46:31 2015 /iocage/base/10.2-RELEASE/root/usr/bin/ypchsh
+   558 -r-sr-xr-x  2 root  wheel       7928 Oct 14 20:46:31 2015 /iocage/base/10.2-RELEASE/root/usr/bin/yppasswd
+   284 -r-xr-sr-x  1 root  smmsp     696888 Aug 12 11:27:47 2015 /iocage/base/10.2-RELEASE/root/usr/libexec/sendmail/sendmail
+   255 -r-sr-xr-x  1 root  wheel      39040 Aug 12 11:27:17 2015 /iocage/base/10.2-RELEASE/root/usr/libexec/ssh-keysign
+   252 -r-sr-xr-x  1 root  wheel       6072 Aug 12 11:27:02 2015 /iocage/base/10.2-RELEASE/root/usr/libexec/ulog-helper
+   284 -r-sr-sr-x  2 root  authpf     24216 Aug 12 11:27:39 2015 /iocage/base/10.2-RELEASE/root/usr/sbin/authpf
+   284 -r-sr-sr-x  2 root  authpf     24216 Aug 12 11:27:39 2015 /iocage/base/10.2-RELEASE/root/usr/sbin/authpf-noip
+   288 -r-xr-sr-x  1 root  daemon     55936 Aug 12 11:27:44 2015 /iocage/base/10.2-RELEASE/root/usr/sbin/lpc
+   415 -r-sr-xr--  1 root  network   416120 Aug 12 11:27:46 2015 /iocage/base/10.2-RELEASE/root/usr/sbin/ppp
+   282 -r-sr-xr-x  1 root  wheel      21040 Aug 12 11:27:47 2015 /iocage/base/10.2-RELEASE/root/usr/sbin/timedc
+   410 -r-sr-xr-x  1 root  wheel      32696 Aug 12 11:27:47 2015 /iocage/base/10.2-RELEASE/root/usr/sbin/traceroute
+   439 -r-sr-xr-x  1 root  wheel      23976 Aug 12 11:27:47 2015 /iocage/base/10.2-RELEASE/root/usr/sbin/traceroute6
+   514 -r-xr-sr-x  1 root  kmem       11608 Aug 12 11:27:47 2015 /iocage/base/10.2-RELEASE/root/usr/sbin/trpt
  84504 -r-sr-xr-x  1 root  wheel      19440 Aug 24 12:24:30 2015 /iocage/jails/1a5b55dc-52c6-11e5-a6b8-0cc47a68c908/root/bin/rcp
  12807 -r-sr-xr--  1 root  operator    9984 Aug 12 11:27:14 2015 /iocage/jails/1a5b55dc-52c6-11e5-a6b8-0cc47a68c908/root/sbin/mksnap_ffs
  12778 -r-sr-xr-x  1 root  wheel      28080 Aug 12 11:27:15 2015 /iocage/jails/1a5b55dc-52c6-11e5-a6b8-0cc47a68c908/root/sbin/ping
@@ -134,6 +134,51 @@
    752 -r-sr-xr-x  1 root  wheel      32696 Aug 12 11:27:47 2015 /iocage/jails/1a5b55dc-52c6-11e5-a6b8-0cc47a68c908/root/usr/sbin/traceroute
    819 -r-sr-xr-x  1 root  wheel      23976 Aug 12 11:27:47 2015 /iocage/jails/1a5b55dc-52c6-11e5-a6b8-0cc47a68c908/root/usr/sbin/traceroute6
    992 -r-xr-sr-x  1 root  kmem       11608 Aug 12 11:27:47 2015 /iocage/jails/1a5b55dc-52c6-11e5-a6b8-0cc47a68c908/root/usr/sbin/trpt
+ 71035 -r-sr-xr-x  1 root  wheel      19440 Oct 14 20:46:30 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/bin/rcp
+  4105 -r-sr-xr--  1 root  operator    9984 Aug 12 11:27:14 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/sbin/mksnap_ffs
+  4076 -r-sr-xr-x  1 root  wheel      28080 Aug 12 11:27:15 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/sbin/ping
+  4088 -r-sr-xr-x  1 root  wheel      40648 Aug 12 11:27:15 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/sbin/ping6
+  4079 -r-sr-xr--  2 root  operator   15712 Aug 12 11:27:15 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/sbin/poweroff
+  4079 -r-sr-xr--  2 root  operator   15712 Aug 12 11:27:15 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/sbin/shutdown
+   807 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/at
+   807 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/atq
+   807 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/atrm
+   807 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/batch
+  1094 -r-xr-sr-x  1 root  kmem       13104 Aug 12 11:27:30 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/btsockstat
+ 71050 -r-sr-xr-x  6 root  wheel      21768 Oct 14 20:46:31 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/chfn
+ 71050 -r-sr-xr-x  6 root  wheel      21768 Oct 14 20:46:31 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/chpass
+ 71050 -r-sr-xr-x  6 root  wheel      21768 Oct 14 20:46:31 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/chsh
+ 71052 -r-sr-xr-x  1 root  wheel      32296 Oct 14 20:46:31 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/crontab
+   831 -r-sr-xr-x  1 root  wheel      11496 Aug 12 11:27:33 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/lock
+ 71056 -r-sr-xr-x  1 root  wheel      25256 Oct 14 20:46:31 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/login
+  1010 -r-sr-sr-x  1 root  daemon     33072 Aug 12 11:27:44 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/lpq
+  1147 -r-sr-sr-x  1 root  daemon     38576 Aug 12 11:27:44 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/lpr
+  1074 -r-sr-sr-x  1 root  daemon     32896 Aug 12 11:27:44 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/lprm
+ 71060 -r-xr-sr-x  1 root  kmem      144600 Oct 14 20:46:31 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/netstat
+ 71062 -r-sr-xr-x  1 root  wheel       6776 Oct 14 20:46:31 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/opieinfo
+ 71064 -r-sr-xr-x  1 root  wheel      13400 Oct 14 20:46:31 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/opiepasswd
+ 71066 -r-sr-xr-x  2 root  wheel       7928 Oct 14 20:46:31 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/passwd
+   984 -r-sr-xr-x  1 root  wheel      15712 Aug 12 11:27:34 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/quota
+ 71068 -r-sr-xr-x  1 root  wheel      15192 Oct 14 20:46:31 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/rlogin
+ 71070 -r-sr-xr-x  1 root  wheel      11168 Oct 14 20:46:31 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/rsh
+ 71074 -r-sr-xr-x  1 root  wheel      17200 Oct 14 20:46:31 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/su
+   861 -r-xr-sr-x  1 root  tty        16144 Aug 12 11:27:37 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/wall
+   890 -r-xr-sr-x  1 root  tty        12080 Aug 12 11:27:38 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/write
+ 71050 -r-sr-xr-x  6 root  wheel      21768 Oct 14 20:46:31 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/ypchfn
+ 71050 -r-sr-xr-x  6 root  wheel      21768 Oct 14 20:46:31 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/ypchpass
+ 71050 -r-sr-xr-x  6 root  wheel      21768 Oct 14 20:46:31 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/ypchsh
+ 71066 -r-sr-xr-x  2 root  wheel       7928 Oct 14 20:46:31 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/bin/yppasswd
+  3487 -r-xr-sr-x  1 root  smmsp     696888 Aug 12 11:27:47 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/libexec/sendmail/sendmail
+  3366 -r-sr-xr-x  1 root  wheel      39040 Aug 12 11:27:17 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/libexec/ssh-keysign
+  3365 -r-sr-xr-x  1 root  wheel       6072 Aug 12 11:27:02 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/libexec/ulog-helper
+ 86828 -r-sr-sr-x  2 root  authpf     24216 Aug 12 11:27:39 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/sbin/authpf
+ 86828 -r-sr-sr-x  2 root  authpf     24216 Aug 12 11:27:39 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/sbin/authpf-noip
+ 86836 -r-xr-sr-x  1 root  daemon     55936 Aug 12 11:27:44 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/sbin/lpc
+ 86761 -r-sr-xr--  1 root  network   416120 Aug 12 11:27:46 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/sbin/ppp
+ 86901 -r-sr-xr-x  1 root  wheel      21040 Aug 12 11:27:47 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/sbin/timedc
+ 86724 -r-sr-xr-x  1 root  wheel      32696 Aug 12 11:27:47 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/sbin/traceroute
+ 86791 -r-sr-xr-x  1 root  wheel      23976 Aug 12 11:27:47 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/sbin/traceroute6
+ 86964 -r-xr-sr-x  1 root  kmem       11608 Aug 12 11:27:47 2015 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/usr/sbin/trpt
  84504 -r-sr-xr-x  1 root  wheel      19440 Aug 24 12:24:30 2015 /iocage/jails/4dbed757-4a7e-11e5-ba53-0cc47a68c908/root/bin/rcp
  12807 -r-sr-xr--  1 root  operator    9984 Aug 12 11:27:14 2015 /iocage/jails/4dbed757-4a7e-11e5-ba53-0cc47a68c908/root/sbin/mksnap_ffs
  12778 -r-sr-xr-x  1 root  wheel      28080 Aug 12 11:27:15 2015 /iocage/jails/4dbed757-4a7e-11e5-ba53-0cc47a68c908/root/sbin/ping
@@ -179,96 +224,6 @@
    752 -r-sr-xr-x  1 root  wheel      32696 Aug 12 11:27:47 2015 /iocage/jails/4dbed757-4a7e-11e5-ba53-0cc47a68c908/root/usr/sbin/traceroute
    819 -r-sr-xr-x  1 root  wheel      23976 Aug 12 11:27:47 2015 /iocage/jails/4dbed757-4a7e-11e5-ba53-0cc47a68c908/root/usr/sbin/traceroute6
    992 -r-xr-sr-x  1 root  kmem       11608 Aug 12 11:27:47 2015 /iocage/jails/4dbed757-4a7e-11e5-ba53-0cc47a68c908/root/usr/sbin/trpt
- 84504 -r-sr-xr-x  1 root  wheel      19440 Aug 24 12:24:30 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/bin/rcp
- 12807 -r-sr-xr--  1 root  operator    9984 Aug 12 11:27:14 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/sbin/mksnap_ffs
- 12778 -r-sr-xr-x  1 root  wheel      28080 Aug 12 11:27:15 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/sbin/ping
- 12790 -r-sr-xr-x  1 root  wheel      40648 Aug 12 11:27:15 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/sbin/ping6
- 12781 -r-sr-xr--  2 root  operator   15712 Aug 12 11:27:15 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/sbin/poweroff
- 12781 -r-sr-xr--  2 root  operator   15712 Aug 12 11:27:15 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/sbin/shutdown
-  9697 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/at
-  9697 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/atq
-  9697 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/atrm
-  9697 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/batch
-  9942 -r-xr-sr-x  1 root  kmem       13104 Aug 12 11:27:30 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/btsockstat
- 84508 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/chfn
- 84508 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/chpass
- 84508 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/chsh
- 84510 -r-sr-xr-x  1 root  wheel      32296 Aug 24 12:24:30 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/crontab
-  9721 -r-sr-xr-x  1 root  wheel      11496 Aug 12 11:27:33 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/lock
- 84512 -r-sr-xr-x  1 root  wheel      25256 Aug 24 12:24:30 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/login
-  9899 -r-sr-sr-x  1 root  daemon     33072 Aug 12 11:27:44 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/lpq
-  9995 -r-sr-sr-x  1 root  daemon     38576 Aug 12 11:27:44 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/lpr
-  9929 -r-sr-sr-x  1 root  daemon     32896 Aug 12 11:27:44 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/lprm
-  9710 -r-xr-sr-x  1 root  kmem      146552 Aug 12 11:27:34 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/netstat
- 84514 -r-sr-xr-x  1 root  wheel       6776 Aug 24 12:24:30 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/opieinfo
- 84516 -r-sr-xr-x  1 root  wheel      13400 Aug 24 12:24:30 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/opiepasswd
- 84518 -r-sr-xr-x  2 root  wheel       7928 Aug 24 12:24:30 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/passwd
-  9873 -r-sr-xr-x  1 root  wheel      15712 Aug 12 11:27:34 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/quota
- 84520 -r-sr-xr-x  1 root  wheel      15192 Aug 24 12:24:30 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/rlogin
- 84522 -r-sr-xr-x  1 root  wheel      11168 Aug 24 12:24:30 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/rsh
- 84524 -r-sr-xr-x  1 root  wheel      17200 Aug 24 12:24:30 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/su
-  9751 -r-xr-sr-x  1 root  tty        16144 Aug 12 11:27:37 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/wall
-  9780 -r-xr-sr-x  1 root  tty        12080 Aug 12 11:27:38 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/write
- 84508 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/ypchfn
- 84508 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/ypchpass
- 84508 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/ypchsh
- 84518 -r-sr-xr-x  2 root  wheel       7928 Aug 24 12:24:30 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/bin/yppasswd
- 12169 -r-xr-sr-x  1 root  smmsp     696888 Aug 12 11:27:47 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/libexec/sendmail/sendmail
- 12015 -r-sr-xr-x  1 root  wheel      39040 Aug 12 11:27:17 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/libexec/ssh-keysign
- 12014 -r-sr-xr-x  1 root  wheel       6072 Aug 12 11:27:02 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/libexec/ulog-helper
-   856 -r-sr-sr-x  2 root  authpf     24216 Aug 12 11:27:39 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/sbin/authpf
-   856 -r-sr-sr-x  2 root  authpf     24216 Aug 12 11:27:39 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/sbin/authpf-noip
-   864 -r-xr-sr-x  1 root  daemon     55936 Aug 12 11:27:44 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/sbin/lpc
-   789 -r-sr-xr--  1 root  network   416120 Aug 12 11:27:46 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/sbin/ppp
-   929 -r-sr-xr-x  1 root  wheel      21040 Aug 12 11:27:47 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/sbin/timedc
-   752 -r-sr-xr-x  1 root  wheel      32696 Aug 12 11:27:47 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/sbin/traceroute
-   819 -r-sr-xr-x  1 root  wheel      23976 Aug 12 11:27:47 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/sbin/traceroute6
-   992 -r-xr-sr-x  1 root  kmem       11608 Aug 12 11:27:47 2015 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root/usr/sbin/trpt
- 84504 -r-sr-xr-x  1 root  wheel      19440 Aug 24 12:24:30 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/bin/rcp
- 12807 -r-sr-xr--  1 root  operator    9984 Aug 12 11:27:14 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/sbin/mksnap_ffs
- 12778 -r-sr-xr-x  1 root  wheel      28080 Aug 12 11:27:15 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/sbin/ping
- 12790 -r-sr-xr-x  1 root  wheel      40648 Aug 12 11:27:15 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/sbin/ping6
- 12781 -r-sr-xr--  2 root  operator   15712 Aug 12 11:27:15 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/sbin/poweroff
- 12781 -r-sr-xr--  2 root  operator   15712 Aug 12 11:27:15 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/sbin/shutdown
-  9697 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/at
-  9697 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/atq
-  9697 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/atrm
-  9697 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/batch
-  9942 -r-xr-sr-x  1 root  kmem       13104 Aug 12 11:27:30 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/btsockstat
- 84508 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/chfn
- 84508 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/chpass
- 84508 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/chsh
- 84510 -r-sr-xr-x  1 root  wheel      32296 Aug 24 12:24:30 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/crontab
-  9721 -r-sr-xr-x  1 root  wheel      11496 Aug 12 11:27:33 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/lock
- 84512 -r-sr-xr-x  1 root  wheel      25256 Aug 24 12:24:30 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/login
-  9899 -r-sr-sr-x  1 root  daemon     33072 Aug 12 11:27:44 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/lpq
-  9995 -r-sr-sr-x  1 root  daemon     38576 Aug 12 11:27:44 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/lpr
-  9929 -r-sr-sr-x  1 root  daemon     32896 Aug 12 11:27:44 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/lprm
-  9710 -r-xr-sr-x  1 root  kmem      146552 Aug 12 11:27:34 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/netstat
- 84514 -r-sr-xr-x  1 root  wheel       6776 Aug 24 12:24:30 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/opieinfo
- 84516 -r-sr-xr-x  1 root  wheel      13400 Aug 24 12:24:30 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/opiepasswd
- 84518 -r-sr-xr-x  2 root  wheel       7928 Aug 24 12:24:30 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/passwd
-  9873 -r-sr-xr-x  1 root  wheel      15712 Aug 12 11:27:34 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/quota
- 84520 -r-sr-xr-x  1 root  wheel      15192 Aug 24 12:24:30 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/rlogin
- 84522 -r-sr-xr-x  1 root  wheel      11168 Aug 24 12:24:30 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/rsh
- 84524 -r-sr-xr-x  1 root  wheel      17200 Aug 24 12:24:30 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/su
-  9751 -r-xr-sr-x  1 root  tty        16144 Aug 12 11:27:37 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/wall
-  9780 -r-xr-sr-x  1 root  tty        12080 Aug 12 11:27:38 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/write
- 84508 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/ypchfn
- 84508 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/ypchpass
- 84508 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/ypchsh
- 84518 -r-sr-xr-x  2 root  wheel       7928 Aug 24 12:24:30 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/bin/yppasswd
- 12169 -r-xr-sr-x  1 root  smmsp     696888 Aug 12 11:27:47 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/libexec/sendmail/sendmail
- 12015 -r-sr-xr-x  1 root  wheel      39040 Aug 12 11:27:17 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/libexec/ssh-keysign
- 12014 -r-sr-xr-x  1 root  wheel       6072 Aug 12 11:27:02 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/libexec/ulog-helper
-   856 -r-sr-sr-x  2 root  authpf     24216 Aug 12 11:27:39 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/sbin/authpf
-   856 -r-sr-sr-x  2 root  authpf     24216 Aug 12 11:27:39 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/sbin/authpf-noip
-   864 -r-xr-sr-x  1 root  daemon     55936 Aug 12 11:27:44 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/sbin/lpc
-   789 -r-sr-xr--  1 root  network   416120 Aug 12 11:27:46 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/sbin/ppp
-   929 -r-sr-xr-x  1 root  wheel      21040 Aug 12 11:27:47 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/sbin/timedc
-   752 -r-sr-xr-x  1 root  wheel      32696 Aug 12 11:27:47 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/sbin/traceroute
-   819 -r-sr-xr-x  1 root  wheel      23976 Aug 12 11:27:47 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/sbin/traceroute6
-   992 -r-xr-sr-x  1 root  kmem       11608 Aug 12 11:27:47 2015 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/usr/sbin/trpt
  12034 -r-sr-xr-x  1 root  wheel      19968 Nov 11 16:03:13 2014 /iocage/releases/10.1-RELEASE/root/bin/rcp
  12556 -r-sr-xr--  1 root  operator    9984 Nov 11 16:03:20 2014 /iocage/releases/10.1-RELEASE/root/sbin/mksnap_ffs
  12481 -r-sr-xr-x  1 root  wheel      28080 Nov 11 16:03:20 2014 /iocage/releases/10.1-RELEASE/root/sbin/ping
@@ -314,51 +269,51 @@
    310 -r-sr-xr-x  1 root  wheel      28424 Nov 11 16:03:41 2014 /iocage/releases/10.1-RELEASE/root/usr/sbin/traceroute
    136 -r-sr-xr-x  1 root  wheel      23976 Nov 11 16:03:41 2014 /iocage/releases/10.1-RELEASE/root/usr/sbin/traceroute6
    328 -r-xr-sr-x  1 root  kmem       11608 Nov 11 16:03:41 2014 /iocage/releases/10.1-RELEASE/root/usr/sbin/trpt
- 84504 -r-sr-xr-x  1 root  wheel      19440 Aug 24 12:24:30 2015 /iocage/releases/10.2-RELEASE/root/bin/rcp
- 12807 -r-sr-xr--  1 root  operator    9984 Aug 12 11:27:14 2015 /iocage/releases/10.2-RELEASE/root/sbin/mksnap_ffs
- 12778 -r-sr-xr-x  1 root  wheel      28080 Aug 12 11:27:15 2015 /iocage/releases/10.2-RELEASE/root/sbin/ping
- 12790 -r-sr-xr-x  1 root  wheel      40648 Aug 12 11:27:15 2015 /iocage/releases/10.2-RELEASE/root/sbin/ping6
- 12781 -r-sr-xr--  2 root  operator   15712 Aug 12 11:27:15 2015 /iocage/releases/10.2-RELEASE/root/sbin/poweroff
- 12781 -r-sr-xr--  2 root  operator   15712 Aug 12 11:27:15 2015 /iocage/releases/10.2-RELEASE/root/sbin/shutdown
-  9697 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/at
-  9697 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/atq
-  9697 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/atrm
-  9697 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/batch
-  9942 -r-xr-sr-x  1 root  kmem       13104 Aug 12 11:27:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/btsockstat
- 84508 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/chfn
- 84508 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/chpass
- 84508 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/chsh
- 84510 -r-sr-xr-x  1 root  wheel      32296 Aug 24 12:24:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/crontab
-  9721 -r-sr-xr-x  1 root  wheel      11496 Aug 12 11:27:33 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/lock
- 84512 -r-sr-xr-x  1 root  wheel      25256 Aug 24 12:24:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/login
-  9899 -r-sr-sr-x  1 root  daemon     33072 Aug 12 11:27:44 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/lpq
-  9995 -r-sr-sr-x  1 root  daemon     38576 Aug 12 11:27:44 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/lpr
-  9929 -r-sr-sr-x  1 root  daemon     32896 Aug 12 11:27:44 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/lprm
-  9710 -r-xr-sr-x  1 root  kmem      146552 Aug 12 11:27:34 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/netstat
- 84514 -r-sr-xr-x  1 root  wheel       6776 Aug 24 12:24:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/opieinfo
- 84516 -r-sr-xr-x  1 root  wheel      13400 Aug 24 12:24:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/opiepasswd
- 84518 -r-sr-xr-x  2 root  wheel       7928 Aug 24 12:24:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/passwd
-  9873 -r-sr-xr-x  1 root  wheel      15712 Aug 12 11:27:34 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/quota
- 84520 -r-sr-xr-x  1 root  wheel      15192 Aug 24 12:24:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/rlogin
- 84522 -r-sr-xr-x  1 root  wheel      11168 Aug 24 12:24:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/rsh
- 84524 -r-sr-xr-x  1 root  wheel      17200 Aug 24 12:24:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/su
-  9751 -r-xr-sr-x  1 root  tty        16144 Aug 12 11:27:37 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/wall
-  9780 -r-xr-sr-x  1 root  tty        12080 Aug 12 11:27:38 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/write
- 84508 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/ypchfn
- 84508 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/ypchpass
- 84508 -r-sr-xr-x  6 root  wheel      21768 Aug 24 12:24:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/ypchsh
- 84518 -r-sr-xr-x  2 root  wheel       7928 Aug 24 12:24:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/yppasswd
- 12169 -r-xr-sr-x  1 root  smmsp     696888 Aug 12 11:27:47 2015 /iocage/releases/10.2-RELEASE/root/usr/libexec/sendmail/sendmail
- 12015 -r-sr-xr-x  1 root  wheel      39040 Aug 12 11:27:17 2015 /iocage/releases/10.2-RELEASE/root/usr/libexec/ssh-keysign
- 12014 -r-sr-xr-x  1 root  wheel       6072 Aug 12 11:27:02 2015 /iocage/releases/10.2-RELEASE/root/usr/libexec/ulog-helper
-   856 -r-sr-sr-x  2 root  authpf     24216 Aug 12 11:27:39 2015 /iocage/releases/10.2-RELEASE/root/usr/sbin/authpf
-   856 -r-sr-sr-x  2 root  authpf     24216 Aug 12 11:27:39 2015 /iocage/releases/10.2-RELEASE/root/usr/sbin/authpf-noip
-   864 -r-xr-sr-x  1 root  daemon     55936 Aug 12 11:27:44 2015 /iocage/releases/10.2-RELEASE/root/usr/sbin/lpc
-   789 -r-sr-xr--  1 root  network   416120 Aug 12 11:27:46 2015 /iocage/releases/10.2-RELEASE/root/usr/sbin/ppp
-   929 -r-sr-xr-x  1 root  wheel      21040 Aug 12 11:27:47 2015 /iocage/releases/10.2-RELEASE/root/usr/sbin/timedc
-   752 -r-sr-xr-x  1 root  wheel      32696 Aug 12 11:27:47 2015 /iocage/releases/10.2-RELEASE/root/usr/sbin/traceroute
-   819 -r-sr-xr-x  1 root  wheel      23976 Aug 12 11:27:47 2015 /iocage/releases/10.2-RELEASE/root/usr/sbin/traceroute6
-   992 -r-xr-sr-x  1 root  kmem       11608 Aug 12 11:27:47 2015 /iocage/releases/10.2-RELEASE/root/usr/sbin/trpt
+ 71035 -r-sr-xr-x  1 root  wheel      19440 Oct 14 20:46:30 2015 /iocage/releases/10.2-RELEASE/root/bin/rcp
+  4105 -r-sr-xr--  1 root  operator    9984 Aug 12 11:27:14 2015 /iocage/releases/10.2-RELEASE/root/sbin/mksnap_ffs
+  4076 -r-sr-xr-x  1 root  wheel      28080 Aug 12 11:27:15 2015 /iocage/releases/10.2-RELEASE/root/sbin/ping
+  4088 -r-sr-xr-x  1 root  wheel      40648 Aug 12 11:27:15 2015 /iocage/releases/10.2-RELEASE/root/sbin/ping6
+  4079 -r-sr-xr--  2 root  operator   15712 Aug 12 11:27:15 2015 /iocage/releases/10.2-RELEASE/root/sbin/poweroff
+  4079 -r-sr-xr--  2 root  operator   15712 Aug 12 11:27:15 2015 /iocage/releases/10.2-RELEASE/root/sbin/shutdown
+   807 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/at
+   807 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/atq
+   807 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/atrm
+   807 -r-sr-xr-x  4 root  wheel      28576 Aug 12 11:27:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/batch
+  1094 -r-xr-sr-x  1 root  kmem       13104 Aug 12 11:27:30 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/btsockstat
+ 71050 -r-sr-xr-x  6 root  wheel      21768 Oct 14 20:46:31 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/chfn
+ 71050 -r-sr-xr-x  6 root  wheel      21768 Oct 14 20:46:31 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/chpass
+ 71050 -r-sr-xr-x  6 root  wheel      21768 Oct 14 20:46:31 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/chsh
+ 71052 -r-sr-xr-x  1 root  wheel      32296 Oct 14 20:46:31 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/crontab
+   831 -r-sr-xr-x  1 root  wheel      11496 Aug 12 11:27:33 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/lock
+ 71056 -r-sr-xr-x  1 root  wheel      25256 Oct 14 20:46:31 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/login
+  1010 -r-sr-sr-x  1 root  daemon     33072 Aug 12 11:27:44 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/lpq
+  1147 -r-sr-sr-x  1 root  daemon     38576 Aug 12 11:27:44 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/lpr
+  1074 -r-sr-sr-x  1 root  daemon     32896 Aug 12 11:27:44 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/lprm
+ 71060 -r-xr-sr-x  1 root  kmem      144600 Oct 14 20:46:31 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/netstat
+ 71062 -r-sr-xr-x  1 root  wheel       6776 Oct 14 20:46:31 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/opieinfo
+ 71064 -r-sr-xr-x  1 root  wheel      13400 Oct 14 20:46:31 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/opiepasswd
+ 71066 -r-sr-xr-x  2 root  wheel       7928 Oct 14 20:46:31 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/passwd
+   984 -r-sr-xr-x  1 root  wheel      15712 Aug 12 11:27:34 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/quota
+ 71068 -r-sr-xr-x  1 root  wheel      15192 Oct 14 20:46:31 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/rlogin
+ 71070 -r-sr-xr-x  1 root  wheel      11168 Oct 14 20:46:31 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/rsh
+ 71074 -r-sr-xr-x  1 root  wheel      17200 Oct 14 20:46:31 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/su
+   861 -r-xr-sr-x  1 root  tty        16144 Aug 12 11:27:37 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/wall
+   890 -r-xr-sr-x  1 root  tty        12080 Aug 12 11:27:38 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/write
+ 71050 -r-sr-xr-x  6 root  wheel      21768 Oct 14 20:46:31 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/ypchfn
+ 71050 -r-sr-xr-x  6 root  wheel      21768 Oct 14 20:46:31 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/ypchpass
+ 71050 -r-sr-xr-x  6 root  wheel      21768 Oct 14 20:46:31 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/ypchsh
+ 71066 -r-sr-xr-x  2 root  wheel       7928 Oct 14 20:46:31 2015 /iocage/releases/10.2-RELEASE/root/usr/bin/yppasswd
+  3487 -r-xr-sr-x  1 root  smmsp     696888 Aug 12 11:27:47 2015 /iocage/releases/10.2-RELEASE/root/usr/libexec/sendmail/sendmail
+  3366 -r-sr-xr-x  1 root  wheel      39040 Aug 12 11:27:17 2015 /iocage/releases/10.2-RELEASE/root/usr/libexec/ssh-keysign
+  3365 -r-sr-xr-x  1 root  wheel       6072 Aug 12 11:27:02 2015 /iocage/releases/10.2-RELEASE/root/usr/libexec/ulog-helper
+ 86828 -r-sr-sr-x  2 root  authpf     24216 Aug 12 11:27:39 2015 /iocage/releases/10.2-RELEASE/root/usr/sbin/authpf
+ 86828 -r-sr-sr-x  2 root  authpf     24216 Aug 12 11:27:39 2015 /iocage/releases/10.2-RELEASE/root/usr/sbin/authpf-noip
+ 86836 -r-xr-sr-x  1 root  daemon     55936 Aug 12 11:27:44 2015 /iocage/releases/10.2-RELEASE/root/usr/sbin/lpc
+ 86761 -r-sr-xr--  1 root  network   416120 Aug 12 11:27:46 2015 /iocage/releases/10.2-RELEASE/root/usr/sbin/ppp
+ 86901 -r-sr-xr-x  1 root  wheel      21040 Aug 12 11:27:47 2015 /iocage/releases/10.2-RELEASE/root/usr/sbin/timedc
+ 86724 -r-sr-xr-x  1 root  wheel      32696 Aug 12 11:27:47 2015 /iocage/releases/10.2-RELEASE/root/usr/sbin/traceroute
+ 86791 -r-sr-xr-x  1 root  wheel      23976 Aug 12 11:27:47 2015 /iocage/releases/10.2-RELEASE/root/usr/sbin/traceroute6
+ 86964 -r-xr-sr-x  1 root  kmem       11608 Aug 12 11:27:47 2015 /iocage/releases/10.2-RELEASE/root/usr/sbin/trpt
  25924 -r-sr-xr--  1 root  operator    9520 Aug 21 13:57:09 2015 /sbin/mksnap_ffs
  25992 -r-sr-xr-x  1 root  wheel      27616 Aug 21 13:57:09 2015 /sbin/ping
  25996 -r-sr-xr-x  1 root  wheel      40184 Aug 21 13:57:09 2015 /sbin/ping6

Checking negative group permissions:

warden.int.autonlab.org changes in mounted filesystems:
--- /var/log/mount.today	2015-09-09 03:07:00.000000000 -0400
+++ /tmp/security.FOzzfd9M	2015-10-15 03:06:41.872260081 -0400
@@ -1,10 +1,10 @@
 devfs			/dev			devfs	rw,multilabel 	0 0
 devfs			/iocage/jails/1a5b55dc-52c6-11e5-a6b8-0cc47a68c908/root/dev devfs	rw,multilabel 	0 0
+devfs			/iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/dev devfs	rw,multilabel 	0 0
 devfs			/iocage/jails/4dbed757-4a7e-11e5-ba53-0cc47a68c908/root/dev devfs	rw,multilabel 	0 0
-devfs			/iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/dev devfs	rw,multilabel 	0 0
 fdescfs			/iocage/jails/1a5b55dc-52c6-11e5-a6b8-0cc47a68c908/root/dev/fd fdescfs	rw		0 0
+fdescfs			/iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root/dev/fd fdescfs	rw		0 0
 fdescfs			/iocage/jails/4dbed757-4a7e-11e5-ba53-0cc47a68c908/root/dev/fd fdescfs	rw		0 0
-fdescfs			/iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root/dev/fd fdescfs	rw		0 0
 tank1/ROOT/10.2-RELEASE-up-20150821_175054 /			zfs	rw,noatime,nfsv4acls 	0 0
 tank1/iocage		/iocage			zfs	rw,nfsv4acls 	0 0
 tank1/iocage/.defaults	/iocage/.defaults	zfs	rw,nfsv4acls 	0 0
@@ -51,12 +51,10 @@
 tank1/iocage/jails	/iocage/jails		zfs	rw,nfsv4acls 	0 0
 tank1/iocage/jails/1a5b55dc-52c6-11e5-a6b8-0cc47a68c908 /iocage/jails/1a5b55dc-52c6-11e5-a6b8-0cc47a68c908 zfs	rw,nfsv4acls 	0 0
 tank1/iocage/jails/1a5b55dc-52c6-11e5-a6b8-0cc47a68c908/root /iocage/jails/1a5b55dc-52c6-11e5-a6b8-0cc47a68c908/root zfs	rw,nfsv4acls 	0 0
+tank1/iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908 /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908 zfs	rw,nfsv4acls 	0 0
+tank1/iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root /iocage/jails/2f6bff10-72dd-11e5-a6b8-0cc47a68c908/root zfs	rw,nfsv4acls 	0 0
 tank1/iocage/jails/4dbed757-4a7e-11e5-ba53-0cc47a68c908 /iocage/jails/4dbed757-4a7e-11e5-ba53-0cc47a68c908 zfs	rw,nfsv4acls 	0 0
 tank1/iocage/jails/4dbed757-4a7e-11e5-ba53-0cc47a68c908/root /iocage/jails/4dbed757-4a7e-11e5-ba53-0cc47a68c908/root zfs	rw,nfsv4acls 	0 0
-tank1/iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908 /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908 zfs	rw,nfsv4acls 	0 0
-tank1/iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root /iocage/jails/59aeade8-51d9-11e5-8dee-0cc47a68c908/root zfs	rw,nfsv4acls 	0 0
-tank1/iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908 /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908 zfs	rw,nfsv4acls 	0 0
-tank1/iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root /iocage/jails/71f072b6-56a1-11e5-a6b8-0cc47a68c908/root zfs	rw,nfsv4acls 	0 0
 tank1/iocage/releases	/iocage/releases	zfs	rw,nfsv4acls 	0 0
 tank1/iocage/releases/10.1-RELEASE /iocage/releases/10.1-RELEASE zfs	rw,nfsv4acls 	0 0
 tank1/iocage/releases/10.1-RELEASE/root /iocage/releases/10.1-RELEASE/root zfs	rw,nfsv4acls 	0 0

Checking for uids of 0:
root 0
toor 0

Checking for passwordless accounts:

Checking login.conf permissions:

warden.int.autonlab.org pf denied packets:
+++ /tmp/security.MPyAYgn3	2015-10-15 03:06:41.988241031 -0400
+block return in all [ Evaluations: 19848 Packets: 2141 Bytes: 2872677 States: 0 ]
+block return quick from <bruteforce> to any [ Evaluations: 19848 Packets: 0 Bytes: 0 States: 0 ]
+block return in quick on egress proto tcp from <sshguard> to any port = ssh label "ssh bruteforce" [ Evaluations: 19848 Packets: 0 Bytes: 0 States: 0 ]
+block drop in quick on ! lo0 inet from 127.0.0.0/8 to any [ Evaluations: 19849 Packets: 0 Bytes: 0 States: 0 ]
+block drop in quick from urpf-failed to any [ Evaluations: 18726 Packets: 6830 Bytes: 3896480 States: 0 ]
+block return in on ! lo0 proto tcp from any to any port 6000:6010 [ Evaluations: 11896 Packets: 0 Bytes: 0 States: 0 ]

warden.int.autonlab.org login failures:
Oct 14 21:57:39 warden sshd[75825]: Invalid user predrag from 192.168.10.254
Oct 14 21:57:39 warden sshd[75825]: input_userauth_request: invalid user predrag [preauth]
Oct 14 21:57:39 warden sshd[75825]: Postponed keyboard-interactive for invalid user predrag from 192.168.10.254 port 42768 ssh2 [preauth]
Oct 14 21:57:41 warden sshd[75825]: error: PAM: authentication error for illegal user predrag from lock.dmz.autonlab.org
Oct 14 21:57:41 warden sshd[75825]: Failed keyboard-interactive/pam for invalid user predrag from 192.168.10.254 port 42768 ssh2
Oct 14 21:57:41 warden sshd[75825]: Postponed keyboard-interactive for invalid user predrag from 192.168.10.254 port 42768 ssh2 [preauth]
Oct 14 21:59:23 warden sshd[75839]: Invalid user predrag from 192.168.6.252
Oct 14 21:59:23 warden sshd[75839]: input_userauth_request: invalid user predrag [preauth]
Oct 14 21:59:23 warden sshd[75839]: Postponed keyboard-interactive for invalid user predrag from 192.168.6.252 port 15903 ssh2 [preauth]

warden.int.autonlab.org refused connections:

Checking for packages with security vulnerabilities:
Database fetched: Tue Oct 13 03:33:17 EDT 2015
php56-5.6.11
pcre-8.37_2
screen-4.3.1_1
go-1.4.2,1

-- End of security output --


More information about the Autonlab-sysinfo mailing list