Re: [suse-security] Maybe OT, but urgent - Strange man pages
hi .. does this happen on one tar file only? it was "man tar"
ok, so this is one file being corrupt.
file-system has a problem (which file system do you have, btw?), reiserfs
maybe a bug in the fs code? i'm not expirenced enough to tell, really.
file was partly overwritten accidently, maybe your system was compromised what kind of attack should show the symptom ?
uhm .. someone wanting to make fun, an attack that would cause the fs to corrupt random data - or someone leaving a "signature" as artists do? i told you that my guess would be a software problem like buggy applications or errors in the fs' structure.
look into the man-files content with an editor of your choice (i prefer vi). It's curious, that the formation and some word's are ok. but random charakters are not.
but the formation is stored in a man file too, wouldn't it be corrupted too if the block were gone?
harddiscs may die silently, cauze more and more blocks gets corrupted and you'll never see it - the os marks them as defect and goes on. [...]
true. but it will notify you. i had a damaged hard-disk with win2k and i got quite some entries in the eventlog saying that a block got corrupted (although i didn't get a message box). i have never had this with linux yet, but i bet the system will generate appropriate syslog entries.
memtest86 may show failures, but how i wrote, its an manpage, that was one time written to disk - on setup of the box ?
although i didn't suggest this, it is a good idea. if your memory is failing you never know what might happen. michael
file-system has a problem (which file system do you have, btw?), reiserfs maybe a bug in the fs code? i'm not expirenced enough to tell, really. There were discussions in linux forums since long time, that either reiserfs, or linux kernel 2.4.(some early versions) do corruption on filesystems in an undetectable way, so you realize
Hi folks, that only when you observe something like your man page, or trying to run and executable and getting "not an ELF executable" in reply. I had that both cases with my 2.4.10_suse + reiserfs, and switched to ext3 without any problem since half a year already. At least it's not a failing HD or hackers attack case, for sure, but a filesystem corruption. And yes, it happens with higher probability if the system hangs and has to be resetted/power cycled. Good luck Eduard __________________________________________________ Do You Yahoo!? Yahoo! Tax Center - online filing with TurboTax http://taxes.yahoo.com/
for sure, but a filesystem corruption. And yes, it happens with higher probability if the system hangs and has to be resetted/power cycled. it probably only happen when the system is reseted, because of the structure of Reiser-FS. In Reiser-FS after a reset it can be that the log-replay causes that some files, that were written during hang-up and must be corrected, are not repaired correctly and the system links some old deleted blocks to this files, so they get corrupted. There was a nice article about Linux-Filesystems with tests un the German c't, and they write something about this behavior.
Good luck
Eduard Greetings Hendrik
participants (3)
-
Eduard Avetisyan
-
Hendrik Brandenburger
-
Michael Stern