Manpaths are becoming an internal DoS for me. I can kill them when I see them running but I still haven't found where they get started. Could anybody help, please? --Ragnar
On Wed, 10 May 2000, Ragnar Beer wrote:
Manpaths are becoming an internal DoS for me. I can kill them when I see them running but I still haven't found where they get started. Could anybody help, please? As stated in my other mail, manpath is called as "unset MANPATH ; manpath -qg 2>/dev/null" by /usr/sbin/makewhatis which in turn is called from /etc/cron.daily/aaa_base_do_mandb
Does "unset MANPATH ; manpath -g" work for you on the command line ? -- with kind regards (mit freundlichem Grinsen), Ruediger Oertel (ro@suse.de) ---------------------------------------------------------- does "DONT PANIC" give a hint ?
Today Ruediger Oertel slept on the keyboard and thought about Re:...
As stated in my other mail, manpath is called as "unset MANPATH ; manpath -qg 2>/dev/null" by /usr/sbin/makewhatis which in turn is called from /etc/cron.daily/aaa_base_do_mandb
The problem seems to be that makewhatis is missing, the thing is that it worked befor upgrading the aaa-base package. It looks like the script trys to call makewhatis for ever and ever. any idea what could have happend? Gregor -- Gregor Hlawacek 8700 Leoben http://www.unileoben.ac.at/~m9327555/ Austria ###################################################################### In 1968 it took the computing power of two C-64 to fly to the moon. Now, 1999 you need the computing power of PentiumII 400 to open a simple window. Something must have gone wrong!
On Wed, 10 May 2000, Gregor Hlawacek wrote:
Today Ruediger Oertel slept on the keyboard and thought about Re:...
As stated in my other mail, manpath is called as "unset MANPATH ; manpath -qg 2>/dev/null" by /usr/sbin/makewhatis which in turn is called from /etc/cron.daily/aaa_base_do_mandb
The problem seems to be that makewhatis is missing, the thing is that it worked befor upgrading the aaa-base package. It looks like the script trys to call makewhatis for ever and ever.
any idea what could have happend? Hm, to simplify the problem, what about: /etc/cron.daily/aaa_base_do_mandb:
- # - # some applications need whatis database. If makewhatis exists, call it - # - if [ -x /usr/sbin/makewhatis -a -w /usr/man ] ; then - unset MANPATH manpath - manpath=/usr/share/man:/usr/man:/usr/X11R6/man:/usr/local/man - for DIR in /usr/openwin/man /usr/man/allman /usr/man/de ; do - test -d $DIR && manpath=$manpath:$DIR - done - MANPATH=$manpath - export manpath MANPATH - - /usr/sbin/makewhatis - fi + if [ -x /usr/sbin/makewhatis ] ; then + /usr/sbin/makewhatis + fi Does this change anything ? -- with kind regards (mit freundlichem Grinsen), Ruediger Oertel (ro@suse.de) ---------------------------------------------------------- does "DONT PANIC" give a hint ?
Today Ruediger Oertel slept on the keyboard and thought about Re:...
Hm, to simplify the problem, what about: /etc/cron.daily/aaa_base_do_mandb: .... - MANPATH=$manpath - export manpath MANPATH - - /usr/sbin/makewhatis - fi + if [ -x /usr/sbin/makewhatis ] ; then + /usr/sbin/makewhatis + fi
Does this change anything ?
Don't know. Your too late I already installed the makewhatis package and hope that this will sove the prob. This must have changed in the update of the aaa-base package because it worked befor. ciao Gregor -- Gregor Hlawacek 8700 Leoben http://www.unileoben.ac.at/~m9327555/ Austria ###################################################################### In 1968 it took the computing power of two C-64 to fly to the moon. Now, 1999 you need the computing power of PentiumII 400 to open a simple window. Something must have gone wrong!
On Wed, 10 May 2000, Gregor Hlawacek wrote:
Today Ruediger Oertel slept on the keyboard and thought about Re:...
Hm, to simplify the problem, what about: /etc/cron.daily/aaa_base_do_mandb: .... - MANPATH=$manpath - export manpath MANPATH - - /usr/sbin/makewhatis - fi + if [ -x /usr/sbin/makewhatis ] ; then + /usr/sbin/makewhatis + fi
Does this change anything ?
Don't know. Your too late I already installed the makewhatis package and hope that this will sove the prob. This must have changed in the update of the aaa-base package because it worked befor. Which Version of aaa_base did you have installed before ? But anyway: mkwhatis was only called if it was installed (there always was a "test -x /usr/sbin/makewhatis" before the call) And if "makewhatis" was not installed, I guess I'm searching in the wrong place anyway.
Could someone that still has this problem (or can reproduce it somehow) look in "pstree -ap" to find the parent process of the cpu-hogging "manpath"-process. Maybe even "strace -p PID" with the PID of the manpath process would give a hint. -- with kind regards (mit freundlichem Grinsen), Ruediger Oertel (ro@suse.de) ---------------------------------------------------------- does "DONT PANIC" give a hint ?
-----BEGIN PGP SIGNED MESSAGE----- Hi! I found my system hanging again so I looked around in my crontab and so on and found the following. As somebody else already said its seccheck skript. It is called by the crontab with the daily parameter and starts a script called /usr/lib/secchk/security-daily.sh The whole thing is starting to get a problem when it tries to execute the csh logon script (/etc/csh.cshrc). I didn't find out why but if you comment the following line out in the csh.cshrc it works. setenv MANPATH "`(unsetenv MANPATH; manpath -q)`" it line 19 or so. This is just a workaround the only thing that happens is that the skript doesn`t stop anymore. but i have the feeling that something is missing now in the whole thing. anyway after changing the skript /usr/lib/secchk/security-daily.sh could be called from the command line. Tomorow I tell you if it works with cron to. greetings and good night Gregor - -- Gregor Hlawacek 8700 Leoben http://www.unileoben.ac.at/~m9327555/ Austria ###################################################################### In 1968 it took the computing power of two C-64 to fly to the moon. Now, 1999 you need the computing power of PentiumII 400 to open a simple window. Something must have gone wrong! -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv Comment: Made with pgp4pine iQB1AwUBORyG4tNEOPrxOdbNAQFqYQL7Blebl26Q24Kq9J/M8OF7Qx0rsdAJ1AtV R6Y0wmeXrzd5iNw0iT4c699WsUsJccsSzZZ/nCz1xlJDjaGFeKXvLFVekPndAsmQ 4vml08DJheXcZSlu/ZKYiOO/FxnYV39/ =9J5N -----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I fixed the manpath problem by creating the directories it was looking for. <shrug> Kind of silly, but it worked. On Sat, 13 May 2000, Gregor Hlawacek wrote:
-----BEGIN PGPENVELOPE PROCESSED MESSAGE-----
Hi!
I found my system hanging again so I looked around in my crontab and so on and found the following.
As somebody else already said its seccheck skript. It is called by the crontab with the daily parameter and starts a script called /usr/lib/secchk/security-daily.sh The whole thing is starting to get a problem when it tries to execute the csh logon script (/etc/csh.cshrc). I didn't find out why but if you comment the following line out in the csh.cshrc it works.
setenv MANPATH "`(unsetenv MANPATH; manpath -q)`"
it line 19 or so. This is just a workaround the only thing that happens is that the skript doesn`t stop anymore. but i have the feeling that something is missing now in the whole thing.
anyway after changing the skript /usr/lib/secchk/security-daily.sh could be called from the command line. Tomorow I tell you if it works with cron to.
greetings and good night Gregor
-- Gregor Hlawacek 8700 Leoben http://www.unileoben.ac.at/~m9327555/ Austria ###################################################################### In 1968 it took the computing power of two C-64 to fly to the moon. Now, 1999 you need the computing power of PentiumII 400 to open a simple window. Something must have gone wrong!
-----BEGIN PGPENVELOPE INFORMATION----- Version: 2.6.3i Charset: noconv Comment: Made with pgp4pine
gpg: Signature made Fri May 12 15:34:10 2000 PDT using RSA key ID F139D6CD gpg: requesting key F139D6CD from horowitz.surfnet.nl ... gpg: no valid OpenPGP data found. gpg: Can't check signature: public key not found pgpenvelope_decrypt: Message processed at Fri May 12 15:36:19 2000
-----END PGPENVELOPE INFORMATION-----
--------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
__ L. Sassaman System Administrator | "Everything must end; Technology Consultant | meanwhile we must icq.. 10735603 | amuse ourselves." pgp.. finger://ns.quickie.net/rabbi | --Voltaire -----BEGIN PGP SIGNATURE----- Comment: OpenPGP Encrypted Email Preferred. iD8DBQE5I69APYrxsgmsCmoRAnH5AKCxgsmQrwuzzVVllZ4rmOOmzr+qWQCg2Y+H I6qdCBlHtUTYwHzspV4Ea/g= =cQMb -----END PGP SIGNATURE-----
On Don, 18 Mai 2000 L. Sassaman wrote about Re: [suse-security] manpath again:
I fixed the manpath problem by creating the directories it was looking for. <shrug> Kind of silly, but it worked.
Hi, on my machine mkdir /usr/share/man/allman mkdir /opt/man mkdir /opt/sniff mkdir /opt/sniff/man Is that correct on yours, too? Bye, Martin -- ----------------------------------------------------- Martin Peikert EN 636 Fachgebiet Theoretische Elektrotechnik TU Berlin Sekretariat EN 2 fon 314-23881 fax 314-22284 http://www-tet.ee.tu-berlin.de/peikert/index.html -----------------------------------------------------
Ragnar Beer wrote:
Manpaths are becoming an internal DoS for me. I can kill them when I see them running but I still haven't found where they get started. Could anybody help, please?
pstree -p to see the father process; I would guess cron - aaa_base - manpath started in /etc/crontab Ilja Pavkovic
The hanging manpath call is caused from the script /usr/lib/secchk/security-daily.sh Inside this script there is a line /bin/csh -f -s << end-of-csh > /dev/null 2>&1 While executing this, /etc/csh.cshrc is called. In this file you find the line setenv MANPATH "(unsetenv $MANPATH;`manpath -q`)" That's the one, at least for my system. But likely it can be caused from any skript which starts a csh under certain The question is just *what* circumstances, because calling the security-daily script from the command line works. But called from any crontab, it hangs. Best, Frank -- Dipl.-Inform. Frank Steiner mailto:fst@informatik.uni-kiel.de Lehrstuhl f. Programmiersprachen mailto:fsteiner@web.de CAU Kiel, Olshausenstraße 40 Phone: +49 431 880-7265, Fax: -7613 D-24098 Kiel, Germany http://www.informatik.uni-kiel.de/~fst/ *** Windows 2000 - Die drei grossen G - Gesehen. Gelacht! Gelöscht :) ***
On Don, 11 Mai 2000 Frank Steiner wrote about Re: [suse-security] manpath again:
The question is just *what* circumstances, because calling the security-daily script from the command line works. But called from any crontab, it hangs.
On my system "security-control.sh daily" hangs from both cron and command line. On Don, 11 Mai 2000 Frank Steiner wrote about [suse-security] manpath: quick bugfix:
and replacing in /etc/csh.cshrc the "evil line" ;-)
setenv MANPATH "`(unsetenv MANPATH;manpath -q)`"
by
setenv MANPATH usr/local/man:/usr/share/man:/usr/man:/usr/X11R6/man:/usr/openwin/man:/opt/gnome/man
Of course not a final solution, because the manpath might change over time,
Right, maybe you want to try this: Replace the "evil line" in /etc/csh.cshrc by setenv MANPATH2 "`manpath -q`" unsetenv MANPATH setenv MANPATH $MANPATH2 This allows a changing manpath and now "security-control.sh daily" doesn't hang anymore if invoked from the command line. Tomorrow I can tell you more about cron... Greetings, Martin -- ----------------------------------------------------- Martin Peikert EN 636 Fachgebiet Theoretische Elektrotechnik TU Berlin Sekretariat EN 2 fon 314-23881 fax 314-22284 http://www-tet.ee.tu-berlin.de/peikert/index.html -----------------------------------------------------
"Martin P. Peikert" wrote:
Right, maybe you want to try this: Replace the "evil line" in /etc/csh.cshrc by
setenv MANPATH2 "`manpath -q`" unsetenv MANPATH setenv MANPATH $MANPATH2
This allows a changing manpath and now "security-control.sh daily" doesn't hang anymore if invoked from the command line. Tomorrow I can tell you more about cron...
We tried that first, too, and then the problem disappears for calls from the command line, but not from the crontab... Best, Frank -- Dipl.-Inform. Frank Steiner mailto:fst@informatik.uni-kiel.de Lehrstuhl f. Programmiersprachen mailto:fsteiner@web.de CAU Kiel, Olshausenstraße 40 Phone: +49 431 880-7265, Fax: -7613 D-24098 Kiel, Germany http://www.informatik.uni-kiel.de/~fst/ *** Windows 2000 - Die drei grossen G - Gesehen. Gelacht! Gelöscht :) ***
participants (7)
-
Frank Steiner -
Gregor Hlawacek -
Ilja Pavkovic -
L. Sassaman -
Martin P. Peikert -
Ragnar Beer -
Ruediger Oertel