Re: Files created with emacs are owned by system

[David Kastrup]

Peter Dyballa <Peter_Dyballa@Web.DE> writes:

> Am 01.08.2008 um 19:47 schrieb Joost Kremers:
>
>> another thing i don't really understand is that /usr/bin/emacs is only
>> 30008 bytes large. the emacs binary you compiled is about 300 times
>> bigger...
>
>
> This Apple Emacs is -nw only. Since half a decade 21.2.

Emacs 21.2 can't be compressed into 30008 bytes.  No fscking way.  The
most likely explanation is that this machine has been hacked, emacs (and
likely other binaries) replaced by a propagating virus that does its
damage code, then fetches and executes the original command from
somewhere else.

Try a general ls -l /usr/bin and see what other setuid root binaries you
got.

Another explanation would be that emacs has been replaced by emacsclient
that is setuid because of a hack or braindamage.

-- 
David Kastrup, Kriemhildstr. 15, 44793 Bochum