What does this mean?
13174 ? SN 0:01 sort -f 13175 ? SN 0:00 su nobody -c /usr/bin/find / \( -fstype nfs -o -fstype NFS -o -fstype pr13176 ? SN 0:00 /usr/lib/find/frcode 13177 ? RN 0:09 /usr/bin/find / ( -fstype nfs -o -fstype NFS -o -fstype proc -o -fstype afs - -- Jochen
perhaps suse could add a section about cron jobs to the security manual? this is regularily scheduled stuff, like updatedb (locate). Kurt Seifried, kurt@seifried.org A15B BEE5 B391 B9AD B0EF AEB0 AD63 0B4E AD56 E574 http://www.seifried.org/security/ ----- Original Message ----- From: "Jochen Kaechelin" <jk@wa-p.de> To: <suse-security@suse.com> Sent: Thursday, December 20, 2001 4:22 PM Subject: [suse-security] What does this mean?
** On Thu, 20 Dec 2001 16:31:26 -0700 "Kurt Seifried" <listuser@seifried.org>dashed off this message: **perhaps suse could add a section about cron jobs to the security manual? Now THAT is a really good idea , even if they do a brief , but cogent explination w/ perhaps a fuller explination on the website ? ( include the url in the explation ) it needed take up several chapters ... especially as they could always expand the "coverage" in the following system update information. I have said before that I thought the books are often worth almost as much as the distro itself ! And I keep all the old ones, as there is still information in the older versions of the biggest volume in the box. I will donate them to a worthy group once Numerical designation is back to "whole" numbers again. ( no decimal points <g>) -- j afterthought : Accident,n.:A condition in which presence of mind is good, but absence of body is
perhaps suse could add a section about cron jobs to the security manual?
this is regularily scheduled stuff, like updatedb (locate).
Nah. I don't think so. If a user can use ps, then cat is not too far away. Anyway, if you use options like "ps faux", you see where the processes come from. Roman.
* Jochen Kaechelin wrote on Fri, Dec 21, 2001 at 00:22 +0100:
Is this a C&P mistake, or was this really one line? Maybe a bug in the trojaned "ps" :)?
What does your question mean? The output of ps is explained in man ps. find, sort and su each have an own manpage, none of them is security-relevant. oki, Steffen -- Dieses Schreiben wurde maschinell erstellt, es trägt daher weder Unterschrift noch Siegel.
Hi Steffen,
I guess why he was asking was because he hadn't started those jobs himself, and not because he doesn't know how to interpret ps output. As Kurt answered in his mail: "this is regularily scheduled stuff, like updatedb (locate)."
Good to know - but so useless.... (Or have you ever seen a handwritten ASCII - eMail with a real signature or signet?) :) Cheers and Merry Xmas!!! Ralf * * Ralf 'coko' Koch * mailto:info@formel4.de * --- Drücken Sie auf Abbrechen zum Fortfahren
perhaps suse could add a section about cron jobs to the security manual? this is regularily scheduled stuff, like updatedb (locate). Kurt Seifried, kurt@seifried.org A15B BEE5 B391 B9AD B0EF AEB0 AD63 0B4E AD56 E574 http://www.seifried.org/security/ ----- Original Message ----- From: "Jochen Kaechelin" <jk@wa-p.de> To: <suse-security@suse.com> Sent: Thursday, December 20, 2001 4:22 PM Subject: [suse-security] What does this mean?
** On Thu, 20 Dec 2001 16:31:26 -0700 "Kurt Seifried" <listuser@seifried.org>dashed off this message: **perhaps suse could add a section about cron jobs to the security manual? Now THAT is a really good idea , even if they do a brief , but cogent explination w/ perhaps a fuller explination on the website ? ( include the url in the explation ) it needed take up several chapters ... especially as they could always expand the "coverage" in the following system update information. I have said before that I thought the books are often worth almost as much as the distro itself ! And I keep all the old ones, as there is still information in the older versions of the biggest volume in the box. I will donate them to a worthy group once Numerical designation is back to "whole" numbers again. ( no decimal points <g>) -- j afterthought : Accident,n.:A condition in which presence of mind is good, but absence of body is
perhaps suse could add a section about cron jobs to the security manual?
this is regularily scheduled stuff, like updatedb (locate).
Nah. I don't think so. If a user can use ps, then cat is not too far away. Anyway, if you use options like "ps faux", you see where the processes come from. Roman.
* Jochen Kaechelin wrote on Fri, Dec 21, 2001 at 00:22 +0100:
Is this a C&P mistake, or was this really one line? Maybe a bug in the trojaned "ps" :)?
What does your question mean? The output of ps is explained in man ps. find, sort and su each have an own manpage, none of them is security-relevant. oki, Steffen -- Dieses Schreiben wurde maschinell erstellt, es trägt daher weder Unterschrift noch Siegel.
Hi Steffen,
I guess why he was asking was because he hadn't started those jobs himself, and not because he doesn't know how to interpret ps output. As Kurt answered in his mail: "this is regularily scheduled stuff, like updatedb (locate)."
Good to know - but so useless.... (Or have you ever seen a handwritten ASCII - eMail with a real signature or signet?) :) Cheers and Merry Xmas!!! Ralf * * Ralf 'coko' Koch * mailto:info@formel4.de * --- Drücken Sie auf Abbrechen zum Fortfahren
participants (6)
-
jfweber＠bellsouth.net -
Jochen Kaechelin -
Kurt Seifried -
Ralf Koch -
Roman Drahtmueller -
Steffen Dettmer