On Wed, Jul 12, 2006 at 02:18:15PM +1000, the unit calling itself Damien Miller wrote: > On Tue, 11 Jul 2006, J Moore wrote: > > > Recently one of my 3.8 boxes has producing error messages when cron > > tries to run newsyslog. Following is the error message that arrives in > > root's inbox: > > > > newsyslog: /etc/newsyslog.conf:6: unknown group: wheel > > > > I checked, and sure enough, group wheel does not exist. I have no idea > > how this happened, and I hesitate to just add the group since I don't > > know what caused it to disappear in the first place. > > > > Any ideas or suggestions? > > Fix your group file. If you suspect that your system has been tampered > with, rebuild it from trusted media.
Thanks... after thinking some more, there is a possibile explanation. I installed a hacked version of akpop3d several months ago. It was hacked as a favor by someone (I'd have to search the ports@ archives) who was trying to help with an installation/priveleges issue encountered while installing this package. So here's what I did to "fix" the problem just now: # groupinfo -v 0 name mail passwd * gid 0 members # groupadd -ov -g 0 wheel # groupinfo -v 0 name mail passwd * gid 0 So now /etc/group has two gid 0 groups. Is this a "bad thing"? Thnx, Jay
