I would bet that the process loops in system calls, retrying something that fails. YOu should be able to see what it is by strace'ing it. ok, now i got an strace: as root: write(1, "Password changed\n", 17) = 17 munmap(0x2cc000, 43588) = 0 munmap(0x2f2000, 46992) = 0 munmap(0x2e7000, 41072) = 0 munmap(0x2dd000, 39548) = 0 munmap(0x128000, 18636) = 0 munmap(0x2d7000, 7708) = 0 munmap(0x2db000, 4096) = 0 _exit(0) = ? and as normal user: write(1, "Password changed\n", 17) = 17 munmap(0x2ab000, 43588) = 0 munmap(0x2d1000, 46992) = 0 munmap(0x2c6000, 41072) = 0 munmap(0x2bc000, 39548) = 0 ---NOW it hangs :( where can I find information about munmap?
I was wrong. It loops in its own routines. This is now off-topic (not security related). Markus, please send me an ltrace (instead of an strace) of it, or run it in some debugger (as normal user, make /etc/shadow world-writeable, remove the suid-bit and see if it still loops.).
thank you
Markus
Roman.
--
- -
| Roman Drahtmüller