On Thu, 2018-02-01 at 10:50 +0000, Patrick O'Callaghan wrote: > On Wed, 2018-01-31 at 17:36 -0700, stan wrote: > > On Wed, 31 Jan 2018 20:06:38 +0000 (UTC) > > "mr.cheng" <crquan@xxxxxxxxx> wrote: > > > > > I checked all bash_history and system logs, didn't see any > > > explicit > > > bash call of "chmod g+w ..." ; so I suspect some software is > > > calling > > > by chmod syscall, > > Is this a reply to a private message? I don't see the original on the > list. There's a few users on this list that continuously get dumped in Gmail's spam folder. They seem to all be Yahoo users, that Google claims "... has failed Yahoo's required tests for authentication" without specifying if it's DKIM or SPF or something else. This includes mr.cheng and "tim ignored mailbox." To mr.cheng: It can't be a syscall on a remote machine unless the SSH server is also mounted (eg. via FuseFS); but if you want to monitor those dtrace is the tool you want. I'd first run 'alias' or trace /etc/profile, though. _______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx