[Integrit-users] CentOS 4.2: some mod times being reset with access time

[Zarcomm C. <co...@ma...>]

Hello,

I've got a Centos 4.2 box one which I installed integrit,
made my first run thusly

 	integrit -C twpol.txt -u

then my first check maybe 20 minutes later thusly

 	integrit -C twpol.txt -c

and for some strange reason, a bunch of files that should
not have been modified in any way were, these in /sbin
being typical:

changed: /sbin/adsl-setup   m(20050221-091659:20060223-115000)
changed: /sbin/adsl-status   m(20050221-091659:20060223-115000)
changed: /sbin/accton   m(20050409-060012:20060223-114730)
changed: /sbin/arping   m(20050822-200907:20060223-113357)
changed: /sbin/adsl-start   m(20050221-091659:20060223-115000)
changed: /sbin/adsl-stop   m(20050221-091659:20060223-115000)
changed: /sbin/alsactl   m(20050823-030545:20060223-115252)
changed: /sbin/adsl-connect   m(20050221-091659:20060223-115000)
changed: /sbin/avmcapictrl   m(20050221-145316:20060223-114946)

The new date-time is basically the installation date-time.

Here's something useful:

[root@system sbin]# ls -l | head
total 16444
-rwxr-xr-x  1 root root    6720 Feb 23 11:47 accton
-rwxr-xr-x  1 root root    5244 Aug 21  2005 addpart
-rwxr-xr-x  1 root root   10110 Feb 23 11:50 adsl-connect
-rwxr-xr-x  1 root root   12886 Feb 23 11:50 adsl-setup
-rwxr-xr-x  1 root root    6451 Feb 23 11:50 adsl-start
-rwxr-xr-x  1 root root    2748 Feb 23 11:50 adsl-status
-rwxr-xr-x  1 root root    3030 Feb 23 11:50 adsl-stop
-rwxr-xr-x  1 root root   19988 Aug 21  2005 agetty
-rwxr-xr-x  1 root root   35760 Feb 23 11:52 alsactl

[root@system sbin]# ls -lu | head
total 16444
-rwxr-xr-x  1 root root    6720 Mar  7 23:10 accton
-rwxr-xr-x  1 root root    5244 Mar  7 11:36 addpart
-rwxr-xr-x  1 root root   10110 Mar  7 23:10 adsl-connect
-rwxr-xr-x  1 root root   12886 Mar  7 23:10 adsl-setup
-rwxr-xr-x  1 root root    6451 Mar  7 23:10 adsl-start
-rwxr-xr-x  1 root root    2748 Mar  7 23:10 adsl-status
-rwxr-xr-x  1 root root    3030 Mar  7 23:10 adsl-stop
-rwxr-xr-x  1 root root   19988 Mar  7 11:36 agetty
-rwxr-xr-x  1 root root   35760 Mar  7 23:10 alsactl

[root@system sbin]# ls -lc | head
total 16444
-rwxr-xr-x  1 root root    6720 Mar  7 23:33 accton
-rwxr-xr-x  1 root root    5244 Mar  7 23:30 addpart
-rwxr-xr-x  1 root root   10110 Mar  7 23:33 adsl-connect
-rwxr-xr-x  1 root root   12886 Mar  7 23:33 adsl-setup
-rwxr-xr-x  1 root root    6451 Mar  7 23:33 adsl-start
-rwxr-xr-x  1 root root    2748 Mar  7 23:33 adsl-status
-rwxr-xr-x  1 root root    3030 Mar  7 23:33 adsl-stop
-rwxr-xr-x  1 root root   19988 Mar  7 23:30 agetty
-rwxr-xr-x  1 root root   35760 Mar  7 23:33 alsactl

The config directive used for /sbin was

/sbin pilugsrmzAC


Anyways, hope I'm wrong, but please let me know what's going on.


Thanks,

Alex