Originally posted by: SystemAdmin
Hello,
We have a customer that found a difference about the 'Login interception sequence' of 'seteuid', 'setuid', 'setgid' and 'setgroups' events. The login interception sequence in many UNIX platform (It seems also true for AIX 5.1 and AIX 5.3 for the customer) starts with 'setgid' or 'setgroups' events, which are called 'triggers'. It ends with a 'setuid' event.
However, only on AIX 5.2 machine of the customer (sorry I don't have the exact ML level) , the 'login interception sequence' seems different like 'Third seteuid event', 'second setuid event' and (as AIX 5.1/ AIX 5.3) setgid , setuid.
The question is to know if this is referenced case and if the binary change (for telnetd for instance), could explain that behavior.
Thanks in advance,
Regards,
Chris
#AIX-Forum