I see "manpath"'s running forever. This may be the evil "manpath" problem, where it is looking for directories that don't exist. Go to /etc/manpath.config and delete any MANDATORY_MANPATH dirs which don't exist. Rob. Peter Nixon wrote:

Can someone tell me why "/usr/lib/secchk/security-control.sh daily" would be doing strange things... (See ps list below)

I am using seccheck-0.9-35 on SuSE 6.4 with all available security options and updates. This machine also runs squid,sendmail,smtpd,AVP and BIND

Any help would be appreciated

~ # ps afx PID TTY STAT TIME COMMAND 1 ? S 0:09 init [2] 2 ? SW 0:00 [kflushd] 3 ? SW 0:47 [kupdate] 4 ? SW 0:00 [kpiod] 5 ? SW 0:21 [kswapd] 6 ? SW 0:00 [md_thread] 9 ? SW 0:00 [khubd] 100 ? S 0:28 /usr/sbin/scanlogd 106 ? S 0:22 /usr/sbin/syslogd 110 ? S 0:00 /usr/sbin/klogd -c 1 137 ? S 0:22 /usr/sbin/named -u named -g named 146 ? S 0:00 /usr/sbin/atd 152 ? S 0:00 /usr/sbin/gpm -t ps2 -m /dev/mouse 156 ? S 0:03 /usr/sbin/inetd 178 ? S 0:00 /bin/su - mail -c /usr/sbin/smtp-virus 191 ? S 0:48 \_ perl /usr/sbin/smtp-virus 5689 ? S 0:00 \_ sh -c /usr/local/avp/AvpLinux /var/spool/smtpd/incoming/smtpdvI0vSs >> /var/tmp/smtpdvI0vSs.191/scanlog 5690 ? R 0:00 \_ /usr/local/avp/AvpLinux /var/spool/smtpd/incoming/smtpdvI0vSs 183 ? S 0:02 /usr/sbin/smtpfwdd -u mail -g daemon -d /var/spool/smtpd/scanned 187 ? S 0:00 /usr/sbin/sendmail -q30m -om 199 ? S 0:00 /usr/sbin/squid -sYD 200 ? S 3:05 \_ (squid) -sYD 202 ? S 0:00 \_ (dnsserver) 203 ? S 0:00 \_ (dnsserver) 204 ? S 0:00 \_ (dnsserver) 205 ? S 0:00 \_ (dnsserver) 206 ? S 0:00 \_ (dnsserver) 207 ? S 0:00 \_ (smb_auth) -W sydney -U 192.168.1.2 208 ? S 0:00 \_ (smb_auth) -W sydney -U 192.168.1.2 209 ? S 0:00 \_ (smb_auth) -W sydney -U 192.168.1.2 210 ? S 0:00 \_ (smb_auth) -W sydney -U 192.168.1.2 211 ? S 0:00 \_ (smb_auth) -W sydney -U 192.168.1.2 232 ? S 0:00 \_ (unlinkd) 218 ? S 0:05 /usr/sbin/sshd 5535 ? S 0:00 \_ /usr/sbin/sshd 5537 pts/0 S 0:00 | \_ -bash 5551 pts/0 S 0:00 | \_ su -l 5552 pts/0 S 0:00 | \_ -bash 5598 pts/0 S 0:00 | \_ tail -f /var/log/mail 5614 ? S 0:00 \_ /usr/sbin/sshd 5619 pts/1 S 0:00 \_ -bash 5634 pts/1 S 0:00 \_ su -l 5636 pts/1 S 0:00 \_ -bash 5687 pts/1 R 0:00 \_ ps afx 224 ? SL 0:10 /usr/sbin/xntpd 228 ? S 0:00 /usr/sbin/cron 10746 ? S 0:00 \_ /USR/SBIN/CRON 10751 ? Z 0:00 | \_ [sh <defunct>] 30084 ? S 0:00 \_ /USR/SBIN/CRON 30089 ? Z 0:00 | \_ [sh <defunct>] 16903 ? S 0:00 \_ /USR/SBIN/CRON 16908 ? Z 0:00 | \_ [sh <defunct>] 3658 ? S 0:00 \_ /USR/SBIN/CRON 3663 ? Z 0:00 | \_ [sh <defunct>] 24186 ? S 0:00 \_ /USR/SBIN/CRON 24193 ? Z 0:00 | \_ [sh <defunct>] 26574 ? S 0:00 \_ /USR/SBIN/CRON 26578 ? Z 0:00 | \_ [sh <defunct>] 5069 ? S 0:00 \_ /USR/SBIN/CRON 5074 ? Z 0:00 | \_ [sh <defunct>] 17645 ? S 0:00 \_ /USR/SBIN/CRON 17650 ? Z 0:00 | \_ [sh <defunct>] 3506 ? S 0:00 \_ /USR/SBIN/CRON 3511 ? Z 0:00 | \_ [sh <defunct>] 21891 ? S 0:00 \_ /USR/SBIN/CRON 21896 ? Z 0:00 | \_ [sh <defunct>] 8195 ? S 0:00 \_ /USR/SBIN/CRON 8200 ? Z 0:00 | \_ [sh <defunct>] 25729 ? S 0:00 \_ /USR/SBIN/CRON 25734 ? Z 0:00 \_ [sh <defunct>] 246 tty1 S 0:00 login -- root 309 tty1 S 0:00 \_ -bash 247 tty2 S 0:00 /sbin/mingetty tty2 248 tty3 S 0:00 /sbin/mingetty tty3 249 tty4 S 0:00 /sbin/mingetty tty4 250 tty5 S 0:00 /sbin/mingetty tty5 251 tty6 S 0:00 /sbin/mingetty tty6 10752 ? S 0:00 /bin/sh -c test -x /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh daily & 10762 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 10764 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 10766 ? S 0:00 \_ /bin/sh /usr/lib/secchk/security-daily.sh 10799 ? S 0:00 \_ /bin/csh -f -s 10800 ? R 4106:34 \_ manpath -q 30090 ? S 0:00 /bin/sh -c test -x /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh daily & 30094 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 30101 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 30102 ? S 0:00 \_ /bin/sh /usr/lib/secchk/security-daily.sh 30137 ? S 0:00 \_ /bin/csh -f -s 30138 ? R 2680:25 \_ manpath -q 16909 ? S 0:00 /bin/sh -c test -x /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh daily & 16913 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 16919 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 16920 ? S 0:00 \_ /bin/sh /usr/lib/secchk/security-daily.sh 16955 ? S 0:00 \_ /bin/csh -f -s 16956 ? R 1968:21 \_ manpath -q 3664 ? S 0:00 /bin/sh -c test -x /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh daily & 3668 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 3674 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 3676 ? S 0:00 \_ /bin/sh /usr/lib/secchk/security-daily.sh 3711 ? S 0:00 \_ /bin/csh -f -s 3712 ? R 1492:58 \_ manpath -q 24194 ? S 0:00 /bin/sh -c test -x /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh daily & 24198 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 24206 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 24207 ? S 0:00 \_ /bin/sh /usr/lib/secchk/security-daily.sh 24241 ? S 0:00 \_ /bin/csh -f -s 24242 ? R 1137:23 \_ manpath -q 26579 ? S 0:00 /bin/sh -c test -x /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh monthly & 26583 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh monthly 26586 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh monthly 26590 ? S 0:00 \_ /bin/sh /usr/lib/secchk/security-daily.sh 26627 ? S 0:00 \_ /bin/csh -f -s 26628 ? R 1089:38 \_ manpath -q 5075 ? S 0:00 /bin/sh -c test -x /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh daily & 5079 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 5080 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 5087 ? S 0:00 \_ /bin/sh /usr/lib/secchk/security-daily.sh 5122 ? S 0:00 \_ /bin/csh -f -s 5123 ? R 890:09 \_ manpath -q 17651 ? S 0:00 /bin/sh -c test -x /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh daily & 17656 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 17659 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 17665 ? S 0:00 \_ /bin/sh /usr/lib/secchk/security-daily.sh 17699 ? S 0:00 \_ /bin/csh -f -s 17700 ? R 684:55 \_ manpath -q 3512 ? S 0:00 /bin/sh -c test -x /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh daily & 3516 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 3522 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 3524 ? S 0:00 \_ /bin/sh /usr/lib/secchk/security-daily.sh 3559 ? S 0:00 \_ /bin/csh -f -s 3560 ? R 508:29 \_ manpath -q 21897 ? S 0:00 /bin/sh -c test -x /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh daily & 21902 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 21907 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 21908 ? S 0:00 \_ /bin/sh /usr/lib/secchk/security-daily.sh 21944 ? S 0:00 \_ /bin/csh -f -s 21945 ? R 349:59 \_ manpath -q 8201 ? S 0:00 /bin/sh -c test -x /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh daily & 8205 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 8212 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 8213 ? S 0:00 \_ /bin/sh /usr/lib/secchk/security-daily.sh 8248 ? S 0:00 \_ /bin/csh -f -s 8249 ? R 207:28 \_ manpath -q 25735 ? S 0:00 /bin/sh -c test -x /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh daily & 25740 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 25746 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily 25747 ? S 0:00 \_ /bin/sh /usr/lib/secchk/security-daily.sh 25783 ? S 0:00 \_ /bin/csh -f -s 25784 ? R 77:43 \_ manpath -q

_______________________________________________________________ Peter Nixon Systems Engineer Jigsaw Technology Pty Ltd URL: http://www.jigsaw.com.au Address: 21 Boomerang Place Seven Hills NSW 2147 Australia Phone: 02 9672 4222 Fax: 02 9672 4211 Email: peter@jigsaw.com.au _______________________________________________________________

--------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com