Permission on / changed

[IRI Unix Support Team]

has anyone encountred where / has its permission changed to adm:adm? One os our server's / got switched to adm:adm. Can't figure out how it got changed. Server's load was very high and could not login, so we had to toc the server. After it came back online, NIS (client) wouldn't start, service guard wouldn't start. We then figured out that the /'s permission got flipped to adm:adm. Know how this might have happned???

[A. Clay Stephenson]

I assume that when you say "permission" you really mean owner:group. The only way that a chown could happen is by explicit command by a process running as super-user because only the owner of a file (or a super-user) is allowed to change ownership. It's possible that you have a rogue process (e.g. a cron job) that does a chown -R from some startuing directory but this really has the look of an explicit chown command. How many users have this ability on this system?