Mailinglist Archive: opensuse-security (260 mails)

< Previous Next >
Re: [suse-security] weird seccheck-0.9-35 behaviour
  • From: europax@xxxxxxxx
  • Date: Fri, 07 Jul 2000 18:31:36 -0700
  • Message-id: <39668478.9BB3FB99@xxxxxxxx>
I see "manpath"'s running forever. This may be the evil "manpath"
problem, where it is looking for directories that don't exist. Go to
/etc/manpath.config and delete any MANDATORY_MANPATH dirs which don't
exist. Rob.

Peter Nixon wrote:
>
> Can someone tell me why "/usr/lib/secchk/security-control.sh daily"
> would be doing strange things... (See ps list below)
>
> I am using seccheck-0.9-35 on SuSE 6.4 with all available security options
> and updates.
> This machine also runs squid,sendmail,smtpd,AVP and BIND
>
> Any help would be appreciated
>
> ~ # ps afx
> PID TTY STAT TIME COMMAND
> 1 ? S 0:09 init [2]
> 2 ? SW 0:00 [kflushd]
> 3 ? SW 0:47 [kupdate]
> 4 ? SW 0:00 [kpiod]
> 5 ? SW 0:21 [kswapd]
> 6 ? SW 0:00 [md_thread]
> 9 ? SW 0:00 [khubd]
> 100 ? S 0:28 /usr/sbin/scanlogd
> 106 ? S 0:22 /usr/sbin/syslogd
> 110 ? S 0:00 /usr/sbin/klogd -c 1
> 137 ? S 0:22 /usr/sbin/named -u named -g named
> 146 ? S 0:00 /usr/sbin/atd
> 152 ? S 0:00 /usr/sbin/gpm -t ps2 -m /dev/mouse
> 156 ? S 0:03 /usr/sbin/inetd
> 178 ? S 0:00 /bin/su - mail -c /usr/sbin/smtp-virus
> 191 ? S 0:48 \_ perl /usr/sbin/smtp-virus
> 5689 ? S 0:00 \_ sh -c /usr/local/avp/AvpLinux
> /var/spool/smtpd/incoming/smtpdvI0vSs >> /var/tmp/smtpdvI0vSs.191/scanlog
> 5690 ? R 0:00 \_ /usr/local/avp/AvpLinux
> /var/spool/smtpd/incoming/smtpdvI0vSs
> 183 ? S 0:02 /usr/sbin/smtpfwdd -u mail -g daemon -d
> /var/spool/smtpd/scanned
> 187 ? S 0:00 /usr/sbin/sendmail -q30m -om
> 199 ? S 0:00 /usr/sbin/squid -sYD
> 200 ? S 3:05 \_ (squid) -sYD
> 202 ? S 0:00 \_ (dnsserver)
> 203 ? S 0:00 \_ (dnsserver)
> 204 ? S 0:00 \_ (dnsserver)
> 205 ? S 0:00 \_ (dnsserver)
> 206 ? S 0:00 \_ (dnsserver)
> 207 ? S 0:00 \_ (smb_auth) -W sydney -U 192.168.1.2
> 208 ? S 0:00 \_ (smb_auth) -W sydney -U 192.168.1.2
> 209 ? S 0:00 \_ (smb_auth) -W sydney -U 192.168.1.2
> 210 ? S 0:00 \_ (smb_auth) -W sydney -U 192.168.1.2
> 211 ? S 0:00 \_ (smb_auth) -W sydney -U 192.168.1.2
> 232 ? S 0:00 \_ (unlinkd)
> 218 ? S 0:05 /usr/sbin/sshd
> 5535 ? S 0:00 \_ /usr/sbin/sshd
> 5537 pts/0 S 0:00 | \_ -bash
> 5551 pts/0 S 0:00 | \_ su -l
> 5552 pts/0 S 0:00 | \_ -bash
> 5598 pts/0 S 0:00 | \_ tail -f /var/log/mail
> 5614 ? S 0:00 \_ /usr/sbin/sshd
> 5619 pts/1 S 0:00 \_ -bash
> 5634 pts/1 S 0:00 \_ su -l
> 5636 pts/1 S 0:00 \_ -bash
> 5687 pts/1 R 0:00 \_ ps afx
> 224 ? SL 0:10 /usr/sbin/xntpd
> 228 ? S 0:00 /usr/sbin/cron
> 10746 ? S 0:00 \_ /USR/SBIN/CRON
> 10751 ? Z 0:00 | \_ [sh <defunct>]
> 30084 ? S 0:00 \_ /USR/SBIN/CRON
> 30089 ? Z 0:00 | \_ [sh <defunct>]
> 16903 ? S 0:00 \_ /USR/SBIN/CRON
> 16908 ? Z 0:00 | \_ [sh <defunct>]
> 3658 ? S 0:00 \_ /USR/SBIN/CRON
> 3663 ? Z 0:00 | \_ [sh <defunct>]
> 24186 ? S 0:00 \_ /USR/SBIN/CRON
> 24193 ? Z 0:00 | \_ [sh <defunct>]
> 26574 ? S 0:00 \_ /USR/SBIN/CRON
> 26578 ? Z 0:00 | \_ [sh <defunct>]
> 5069 ? S 0:00 \_ /USR/SBIN/CRON
> 5074 ? Z 0:00 | \_ [sh <defunct>]
> 17645 ? S 0:00 \_ /USR/SBIN/CRON
> 17650 ? Z 0:00 | \_ [sh <defunct>]
> 3506 ? S 0:00 \_ /USR/SBIN/CRON
> 3511 ? Z 0:00 | \_ [sh <defunct>]
> 21891 ? S 0:00 \_ /USR/SBIN/CRON
> 21896 ? Z 0:00 | \_ [sh <defunct>]
> 8195 ? S 0:00 \_ /USR/SBIN/CRON
> 8200 ? Z 0:00 | \_ [sh <defunct>]
> 25729 ? S 0:00 \_ /USR/SBIN/CRON
> 25734 ? Z 0:00 \_ [sh <defunct>]
> 246 tty1 S 0:00 login -- root
> 309 tty1 S 0:00 \_ -bash
> 247 tty2 S 0:00 /sbin/mingetty tty2
> 248 tty3 S 0:00 /sbin/mingetty tty3
> 249 tty4 S 0:00 /sbin/mingetty tty4
> 250 tty5 S 0:00 /sbin/mingetty tty5
> 251 tty6 S 0:00 /sbin/mingetty tty6
> 10752 ? S 0:00 /bin/sh -c test -x
> /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
> daily &
> 10762 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
> 10764 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
> daily
> 10766 ? S 0:00 \_ /bin/sh
> /usr/lib/secchk/security-daily.sh
> 10799 ? S 0:00 \_ /bin/csh -f -s
> 10800 ? R 4106:34 \_ manpath -q
> 30090 ? S 0:00 /bin/sh -c test -x
> /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
> daily &
> 30094 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
> 30101 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
> daily
> 30102 ? S 0:00 \_ /bin/sh
> /usr/lib/secchk/security-daily.sh
> 30137 ? S 0:00 \_ /bin/csh -f -s
> 30138 ? R 2680:25 \_ manpath -q
> 16909 ? S 0:00 /bin/sh -c test -x
> /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
> daily &
> 16913 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
> 16919 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
> daily
> 16920 ? S 0:00 \_ /bin/sh
> /usr/lib/secchk/security-daily.sh
> 16955 ? S 0:00 \_ /bin/csh -f -s
> 16956 ? R 1968:21 \_ manpath -q
> 3664 ? S 0:00 /bin/sh -c test -x
> /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
> daily &
> 3668 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
> 3674 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
> daily
> 3676 ? S 0:00 \_ /bin/sh
> /usr/lib/secchk/security-daily.sh
> 3711 ? S 0:00 \_ /bin/csh -f -s
> 3712 ? R 1492:58 \_ manpath -q
> 24194 ? S 0:00 /bin/sh -c test -x
> /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
> daily &
> 24198 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
> 24206 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
> daily
> 24207 ? S 0:00 \_ /bin/sh
> /usr/lib/secchk/security-daily.sh
> 24241 ? S 0:00 \_ /bin/csh -f -s
> 24242 ? R 1137:23 \_ manpath -q
> 26579 ? S 0:00 /bin/sh -c test -x
> /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
> monthly &
> 26583 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
> monthly
> 26586 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
> monthly
> 26590 ? S 0:00 \_ /bin/sh
> /usr/lib/secchk/security-daily.sh
> 26627 ? S 0:00 \_ /bin/csh -f -s
> 26628 ? R 1089:38 \_ manpath -q
> 5075 ? S 0:00 /bin/sh -c test -x
> /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
> daily &
> 5079 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
> 5080 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
> daily
> 5087 ? S 0:00 \_ /bin/sh
> /usr/lib/secchk/security-daily.sh
> 5122 ? S 0:00 \_ /bin/csh -f -s
> 5123 ? R 890:09 \_ manpath -q
> 17651 ? S 0:00 /bin/sh -c test -x
> /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
> daily &
> 17656 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
> 17659 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
> daily
> 17665 ? S 0:00 \_ /bin/sh
> /usr/lib/secchk/security-daily.sh
> 17699 ? S 0:00 \_ /bin/csh -f -s
> 17700 ? R 684:55 \_ manpath -q
> 3512 ? S 0:00 /bin/sh -c test -x
> /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
> daily &
> 3516 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
> 3522 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
> daily
> 3524 ? S 0:00 \_ /bin/sh
> /usr/lib/secchk/security-daily.sh
> 3559 ? S 0:00 \_ /bin/csh -f -s
> 3560 ? R 508:29 \_ manpath -q
> 21897 ? S 0:00 /bin/sh -c test -x
> /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
> daily &
> 21902 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
> 21907 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
> daily
> 21908 ? S 0:00 \_ /bin/sh
> /usr/lib/secchk/security-daily.sh
> 21944 ? S 0:00 \_ /bin/csh -f -s
> 21945 ? R 349:59 \_ manpath -q
> 8201 ? S 0:00 /bin/sh -c test -x
> /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
> daily &
> 8205 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
> 8212 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
> daily
> 8213 ? S 0:00 \_ /bin/sh
> /usr/lib/secchk/security-daily.sh
> 8248 ? S 0:00 \_ /bin/csh -f -s
> 8249 ? R 207:28 \_ manpath -q
> 25735 ? S 0:00 /bin/sh -c test -x
> /usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
> daily &
> 25740 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
> 25746 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
> daily
> 25747 ? S 0:00 \_ /bin/sh
> /usr/lib/secchk/security-daily.sh
> 25783 ? S 0:00 \_ /bin/csh -f -s
> 25784 ? R 77:43 \_ manpath -q
>
> _______________________________________________________________
> Peter Nixon
> Systems Engineer
> Jigsaw Technology Pty Ltd
> URL: http://www.jigsaw.com.au
> Address: 21 Boomerang Place
> Seven Hills NSW 2147
> Australia
> Phone: 02 9672 4222
> Fax: 02 9672 4211
> Email: peter@xxxxxxxxxxxxx
> _______________________________________________________________
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: suse-security-unsubscribe@xxxxxxxx
> For additional commands, e-mail: suse-security-help@xxxxxxxx

< Previous Next >
References