What does this mean?
13174 ? SN 0:01 sort -f 13175 ? SN 0:00 su nobody -c /usr/bin/find / \( -fstype nfs -o -fstype NFS -o -fstype pr13176 ? SN 0:00 /usr/lib/find/frcode 13177 ? RN 0:09 /usr/bin/find / ( -fstype nfs -o -fstype NFS -o -fstype proc -o -fstype afs - -- Jochen
perhaps suse could add a section about cron jobs to the security manual?
this is regularily scheduled stuff, like updatedb (locate).
Kurt Seifried, kurt@seifried.org
A15B BEE5 B391 B9AD B0EF
AEB0 AD63 0B4E AD56 E574
http://www.seifried.org/security/
----- Original Message -----
From: "Jochen Kaechelin"
13174 ? SN 0:01 sort -f 13175 ? SN 0:00 su nobody -c /usr/bin/find / \( -fstype nfs -o -fstype NFS -o -fstype pr13176 ? SN 0:00 /usr/lib/find/frcode 13177 ? RN 0:09 /usr/bin/find / ( -fstype nfs -o -fstype NFS -o -fstype proc -o -fstype afs -
-- Jochen
-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
** On Thu, 20 Dec 2001 16:31:26 -0700 "Kurt Seifried"
perhaps suse could add a section about cron jobs to the security manual?
this is regularily scheduled stuff, like updatedb (locate).
Nah. I don't think so. If a user can use ps, then cat is not too far away. Anyway, if you use options like "ps faux", you see where the processes come from. Roman.
* Jochen Kaechelin wrote on Fri, Dec 21, 2001 at 00:22 +0100:
13174 ? SN 0:01 sort -f 13175 ? SN 0:00 su nobody -c /usr/bin/find / \( -fstype nfs -o -fstype NFS -o -fstype pr13176 ? SN 0:00 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Is this a C&P mistake, or was this really one line? Maybe a bug in the trojaned "ps" :)?
/usr/lib/find/frcode 13177 ? RN 0:09 /usr/bin/find / ( -fstype nfs -o -fstype NFS -o -fstype proc -o -fstype afs -
What does your question mean? The output of ps is explained in man ps. find, sort and su each have an own manpage, none of them is security-relevant. oki, Steffen -- Dieses Schreiben wurde maschinell erstellt, es trägt daher weder Unterschrift noch Siegel.
Hi Steffen,
[...]
/usr/lib/find/frcode 13177 ? RN 0:09 /usr/bin/find / ( -fstype nfs -o -fstype NFS -o -fstype proc -o -fstype afs -
What does your question mean? The output of ps is explained in man ps. find, sort and su each have an own manpage, none of them is security-relevant.
oki,
Steffen
I guess why he was asking was because he hadn't started those jobs himself, and not because he doesn't know how to interpret ps output. As Kurt answered in his mail: "this is regularily scheduled stuff, like updatedb (locate)."
-- Dieses Schreiben wurde maschinell erstellt, es trägt daher weder Unterschrift noch Siegel.
Good to know - but so useless.... (Or have you ever seen a handwritten ASCII - eMail with a real signature or signet?) :) Cheers and Merry Xmas!!! Ralf * * Ralf 'coko' Koch * mailto:info@formel4.de * --- Drücken Sie auf Abbrechen zum Fortfahren
participants (6)
-
jfweber＠bellsouth.net -
Jochen Kaechelin -
Kurt Seifried -
Ralf Koch -
Roman Drahtmueller -
Steffen Dettmer