Mailinglist Archive: opensuse-security (260 mails)

< Previous Next >
weird seccheck-0.9-35 behaviour
  • From: Peter Nixon <Peter@xxxxxxxxxxxxx>
  • Date: Fri, 7 Jul 2000 15:49:22 +1000
  • Message-id: <503EFA452F16D41192B300508B8B02DA5345@xxxxxxxxxxxxxxxxxxx>
Can someone tell me why "/usr/lib/secchk/security-control.sh daily"
would be doing strange things... (See ps list below)

I am using seccheck-0.9-35 on SuSE 6.4 with all available security options
and updates.
This machine also runs squid,sendmail,smtpd,AVP and BIND

Any help would be appreciated


~ # ps afx
PID TTY STAT TIME COMMAND
1 ? S 0:09 init [2]
2 ? SW 0:00 [kflushd]
3 ? SW 0:47 [kupdate]
4 ? SW 0:00 [kpiod]
5 ? SW 0:21 [kswapd]
6 ? SW 0:00 [md_thread]
9 ? SW 0:00 [khubd]
100 ? S 0:28 /usr/sbin/scanlogd
106 ? S 0:22 /usr/sbin/syslogd
110 ? S 0:00 /usr/sbin/klogd -c 1
137 ? S 0:22 /usr/sbin/named -u named -g named
146 ? S 0:00 /usr/sbin/atd
152 ? S 0:00 /usr/sbin/gpm -t ps2 -m /dev/mouse
156 ? S 0:03 /usr/sbin/inetd
178 ? S 0:00 /bin/su - mail -c /usr/sbin/smtp-virus
191 ? S 0:48 \_ perl /usr/sbin/smtp-virus
5689 ? S 0:00 \_ sh -c /usr/local/avp/AvpLinux
/var/spool/smtpd/incoming/smtpdvI0vSs >> /var/tmp/smtpdvI0vSs.191/scanlog
5690 ? R 0:00 \_ /usr/local/avp/AvpLinux
/var/spool/smtpd/incoming/smtpdvI0vSs
183 ? S 0:02 /usr/sbin/smtpfwdd -u mail -g daemon -d
/var/spool/smtpd/scanned
187 ? S 0:00 /usr/sbin/sendmail -q30m -om
199 ? S 0:00 /usr/sbin/squid -sYD
200 ? S 3:05 \_ (squid) -sYD
202 ? S 0:00 \_ (dnsserver)
203 ? S 0:00 \_ (dnsserver)
204 ? S 0:00 \_ (dnsserver)
205 ? S 0:00 \_ (dnsserver)
206 ? S 0:00 \_ (dnsserver)
207 ? S 0:00 \_ (smb_auth) -W sydney -U 192.168.1.2
208 ? S 0:00 \_ (smb_auth) -W sydney -U 192.168.1.2
209 ? S 0:00 \_ (smb_auth) -W sydney -U 192.168.1.2
210 ? S 0:00 \_ (smb_auth) -W sydney -U 192.168.1.2
211 ? S 0:00 \_ (smb_auth) -W sydney -U 192.168.1.2
232 ? S 0:00 \_ (unlinkd)
218 ? S 0:05 /usr/sbin/sshd
5535 ? S 0:00 \_ /usr/sbin/sshd
5537 pts/0 S 0:00 | \_ -bash
5551 pts/0 S 0:00 | \_ su -l
5552 pts/0 S 0:00 | \_ -bash
5598 pts/0 S 0:00 | \_ tail -f /var/log/mail
5614 ? S 0:00 \_ /usr/sbin/sshd
5619 pts/1 S 0:00 \_ -bash
5634 pts/1 S 0:00 \_ su -l
5636 pts/1 S 0:00 \_ -bash
5687 pts/1 R 0:00 \_ ps afx
224 ? SL 0:10 /usr/sbin/xntpd
228 ? S 0:00 /usr/sbin/cron
10746 ? S 0:00 \_ /USR/SBIN/CRON
10751 ? Z 0:00 | \_ [sh <defunct>]
30084 ? S 0:00 \_ /USR/SBIN/CRON
30089 ? Z 0:00 | \_ [sh <defunct>]
16903 ? S 0:00 \_ /USR/SBIN/CRON
16908 ? Z 0:00 | \_ [sh <defunct>]
3658 ? S 0:00 \_ /USR/SBIN/CRON
3663 ? Z 0:00 | \_ [sh <defunct>]
24186 ? S 0:00 \_ /USR/SBIN/CRON
24193 ? Z 0:00 | \_ [sh <defunct>]
26574 ? S 0:00 \_ /USR/SBIN/CRON
26578 ? Z 0:00 | \_ [sh <defunct>]
5069 ? S 0:00 \_ /USR/SBIN/CRON
5074 ? Z 0:00 | \_ [sh <defunct>]
17645 ? S 0:00 \_ /USR/SBIN/CRON
17650 ? Z 0:00 | \_ [sh <defunct>]
3506 ? S 0:00 \_ /USR/SBIN/CRON
3511 ? Z 0:00 | \_ [sh <defunct>]
21891 ? S 0:00 \_ /USR/SBIN/CRON
21896 ? Z 0:00 | \_ [sh <defunct>]
8195 ? S 0:00 \_ /USR/SBIN/CRON
8200 ? Z 0:00 | \_ [sh <defunct>]
25729 ? S 0:00 \_ /USR/SBIN/CRON
25734 ? Z 0:00 \_ [sh <defunct>]
246 tty1 S 0:00 login -- root
309 tty1 S 0:00 \_ -bash
247 tty2 S 0:00 /sbin/mingetty tty2
248 tty3 S 0:00 /sbin/mingetty tty3
249 tty4 S 0:00 /sbin/mingetty tty4
250 tty5 S 0:00 /sbin/mingetty tty5
251 tty6 S 0:00 /sbin/mingetty tty6
10752 ? S 0:00 /bin/sh -c test -x
/usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
daily &
10762 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
10764 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
daily
10766 ? S 0:00 \_ /bin/sh
/usr/lib/secchk/security-daily.sh
10799 ? S 0:00 \_ /bin/csh -f -s
10800 ? R 4106:34 \_ manpath -q
30090 ? S 0:00 /bin/sh -c test -x
/usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
daily &
30094 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
30101 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
daily
30102 ? S 0:00 \_ /bin/sh
/usr/lib/secchk/security-daily.sh
30137 ? S 0:00 \_ /bin/csh -f -s
30138 ? R 2680:25 \_ manpath -q
16909 ? S 0:00 /bin/sh -c test -x
/usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
daily &
16913 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
16919 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
daily
16920 ? S 0:00 \_ /bin/sh
/usr/lib/secchk/security-daily.sh
16955 ? S 0:00 \_ /bin/csh -f -s
16956 ? R 1968:21 \_ manpath -q
3664 ? S 0:00 /bin/sh -c test -x
/usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
daily &
3668 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
3674 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
daily
3676 ? S 0:00 \_ /bin/sh
/usr/lib/secchk/security-daily.sh
3711 ? S 0:00 \_ /bin/csh -f -s
3712 ? R 1492:58 \_ manpath -q
24194 ? S 0:00 /bin/sh -c test -x
/usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
daily &
24198 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
24206 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
daily
24207 ? S 0:00 \_ /bin/sh
/usr/lib/secchk/security-daily.sh
24241 ? S 0:00 \_ /bin/csh -f -s
24242 ? R 1137:23 \_ manpath -q
26579 ? S 0:00 /bin/sh -c test -x
/usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
monthly &
26583 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
monthly
26586 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
monthly
26590 ? S 0:00 \_ /bin/sh
/usr/lib/secchk/security-daily.sh
26627 ? S 0:00 \_ /bin/csh -f -s
26628 ? R 1089:38 \_ manpath -q
5075 ? S 0:00 /bin/sh -c test -x
/usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
daily &
5079 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
5080 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
daily
5087 ? S 0:00 \_ /bin/sh
/usr/lib/secchk/security-daily.sh
5122 ? S 0:00 \_ /bin/csh -f -s
5123 ? R 890:09 \_ manpath -q
17651 ? S 0:00 /bin/sh -c test -x
/usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
daily &
17656 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
17659 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
daily
17665 ? S 0:00 \_ /bin/sh
/usr/lib/secchk/security-daily.sh
17699 ? S 0:00 \_ /bin/csh -f -s
17700 ? R 684:55 \_ manpath -q
3512 ? S 0:00 /bin/sh -c test -x
/usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
daily &
3516 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
3522 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
daily
3524 ? S 0:00 \_ /bin/sh
/usr/lib/secchk/security-daily.sh
3559 ? S 0:00 \_ /bin/csh -f -s
3560 ? R 508:29 \_ manpath -q
21897 ? S 0:00 /bin/sh -c test -x
/usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
daily &
21902 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
21907 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
daily
21908 ? S 0:00 \_ /bin/sh
/usr/lib/secchk/security-daily.sh
21944 ? S 0:00 \_ /bin/csh -f -s
21945 ? R 349:59 \_ manpath -q
8201 ? S 0:00 /bin/sh -c test -x
/usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
daily &
8205 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
8212 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
daily
8213 ? S 0:00 \_ /bin/sh
/usr/lib/secchk/security-daily.sh
8248 ? S 0:00 \_ /bin/csh -f -s
8249 ? R 207:28 \_ manpath -q
25735 ? S 0:00 /bin/sh -c test -x
/usr/lib/secchk/security-control.sh && /usr/lib/secchk/security-control.sh
daily &
25740 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh daily
25746 ? S 0:00 \_ sh /usr/lib/secchk/security-control.sh
daily
25747 ? S 0:00 \_ /bin/sh
/usr/lib/secchk/security-daily.sh
25783 ? S 0:00 \_ /bin/csh -f -s
25784 ? R 77:43 \_ manpath -q

_______________________________________________________________
Peter Nixon
Systems Engineer
Jigsaw Technology Pty Ltd
URL: http://www.jigsaw.com.au
Address: 21 Boomerang Place
         Seven Hills NSW 2147
Australia
Phone: 02 9672 4222
Fax: 02 9672 4211
Email: peter@xxxxxxxxxxxxx
_______________________________________________________________

< Previous Next >