Confused
Karasik, Vitaly
vkarasik at ndsisrael.com
Tue Jul 13 10:32:09 UTC 2004
you just have cronjob[s] which run some task[s], for example run webalizer - tool for web server logs analyze.
In order to delete unnecessary cronjobs, you should clean /etc/cron.* directories
Rgds,
Vitaly
> -----Original Message-----
> From: Nitin [mailto:nitinmehta at kappa.net.in]
> Sent: Mon, July 12, 2004 12:46 PM
> To: General Red Hat Linux discussion list
> Subject: Confused
>
>
> Hi,
>
> I'm really very confused about the problem. Since the last
> time I installed fresh RedHat 7.2 on my web server, following
> processes are continuously added to the list of processes.
>
> 15306 ? S 0:00 CROND
> 15475 ? T 0:00 awk -v
> progname=/etc/cron.daily/00webalizer progname
> 15476 ? Z 0:00 [awk <defunct>]
> 15608 ? T 0:00 /bin/awk
> 15612 ? Z 0:00 [awk <defunct>]
> 22661 ? S 0:00 CROND
> 22705 ? Z 0:00 [mail <defunct>]
> 26429 ? T 0:00 hostname
> 26430 ? Z 0:00 [hostname <defunct>]
> 28572 ? T 0:00 awk -v
> progname=/etc/cron.daily/rpm progname {?????
> 28573 ? Z 0:00 [awk <defunct>]
> 28588 ? T 0:00 awk -v
> progname=/etc/cron.daily/slocate.cron progname
> 28591 ? Z 0:00 [awk <defunct>]
> 28654 ? T 0:00 awk -v
> progname=/etc/cron.daily/logrotate progname {?
> 28655 ? Z 0:00 [awk <defunct>]
> 28713 ? T 0:00 /bin/awk
> 28714 ? Z 0:00 [awk <defunct>]
> 28880 ? T 0:00 awk -v
> progname=/etc/cron.daily/sysstat progname {???
> 28882 ? Z 0:00 [awk <defunct>]
> 28887 ? T 0:00 awk -v
> progname=/etc/cron.daily/tmpwatch progname {??
> 28898 ? Z 0:00 [awk <defunct>]
> 30744 ? S 0:00 CROND
> 30936 ? T 0:00 awk -v
> progname=/etc/cron.daily/logrotate progname {?
> 30937 ? Z 0:00 [awk <defunct>]
> 30949 ? T 0:00 awk -v
> progname=/etc/cron.daily/makewhatis.cron progn
> 30954 ? Z 0:00 [awk <defunct>]
> 30957 ? T 0:00 chmod 0700 /tmp/makewhatisqKjtJ3
> 30959 ? Z 0:00 [chmod <defunct>]
> 31042 ? T 0:00 /bin/awk
> 31043 ? Z 0:00 [awk <defunct>]
> 2795 ? T 0:00 chmod +r /etc/webmin/version
> 2799 ? Z 0:00 [chmod <defunct>]
> 2895 ? S 0:00 /usr/bin/perl
> /usr/libexec/webmin/miniserv.pl /etc/we
> 3083 ? S 0:00 /usr/libexec/webmin/mysql/view_table.cgi
> 3087 ? Z 0:00 [sh <defunct>]
> 3089 ? T 0:00 hostname
> 3090 ? Z 0:00 [hostname <defunct>]
> 6567 ? S 0:00 CROND
> 6759 ? T 0:00 awk -v
> progname=/etc/cron.daily/logrotate progname {?
> 6760 ? Z 0:00 [awk <defunct>]
> 6942 ? T 0:00 awk -v
> progname=/etc/cron.daily/slocate.cron progname
> 6944 ? Z 0:00 [awk <defunct>]
>
>
> 15306 ? S 0:00 CROND
> 15475 ? T 0:00 awk -v
> progname=/etc/cron.daily/00webalizer progname
> 15476 ? Z 0:00 [awk <defunct>]
> 15608 ? T 0:00 /bin/awk
> 15612 ? Z 0:00 [awk <defunct>]
> 22661 ? S 0:00 CROND
> 22705 ? Z 0:00 [mail <defunct>]
> 26429 ? T 0:00 hostname
> 26430 ? Z 0:00 [hostname <defunct>]
> 28572 ? T 0:00 awk -v
> progname=/etc/cron.daily/rpm progname {?????
> 28573 ? Z 0:00 [awk <defunct>]
> 28588 ? T 0:00 awk -v
> progname=/etc/cron.daily/slocate.cron progname
> 28591 ? Z 0:00 [awk <defunct>]
> 28654 ? T 0:00 awk -v
> progname=/etc/cron.daily/logrotate progname {?
> 28655 ? Z 0:00 [awk <defunct>]
> 28713 ? T 0:00 /bin/awk
> 28714 ? Z 0:00 [awk <defunct>]
> 28880 ? T 0:00 awk -v
> progname=/etc/cron.daily/sysstat progname {???
> 28882 ? Z 0:00 [awk <defunct>]
> 28887 ? T 0:00 awk -v
> progname=/etc/cron.daily/tmpwatch progname {??
> 28898 ? Z 0:00 [awk <defunct>]
> 30744 ? S 0:00 CROND
> 30936 ? T 0:00 awk -v
> progname=/etc/cron.daily/logrotate progname {?
> 30937 ? Z 0:00 [awk <defunct>]
> 30949 ? T 0:00 awk -v
> progname=/etc/cron.daily/makewhatis.cron progn
> 30954 ? Z 0:00 [awk <defunct>]
> 30957 ? T 0:00 chmod 0700 /tmp/makewhatisqKjtJ3
> 30959 ? Z 0:00 [chmod <defunct>]
> 31042 ? T 0:00 /bin/awk
> 31043 ? Z 0:00 [awk <defunct>]
> 2795 ? T 0:00 chmod +r /etc/webmin/version
> 2799 ? Z 0:00 [chmod <defunct>]
> 2895 ? S 0:00 /usr/bin/perl
> /usr/libexec/webmin/miniserv.pl /etc/we
> 3083 ? S 0:00 /usr/libexec/webmin/mysql/view_table.cgi
> 3087 ? Z 0:00 [sh <defunct>]
> 3089 ? T 0:00 hostname
> 3090 ? Z 0:00 [hostname <defunct>]
> 6567 ? S 0:00 CROND
> 6759 ? T 0:00 awk -v
> progname=/etc/cron.daily/logrotate progname {?
> 6760 ? Z 0:00 [awk <defunct>]
> 6942 ? T 0:00 awk -v
> progname=/etc/cron.daily/slocate.cron progname
> 6944 ? Z 0:00 [awk <defunct>]
> 21919 ? S 0:00 CROND
> 22086 ? T 0:00 awk -v
> progname=/etc/cron.daily/00webalizer progname
> 22088 ? Z 0:00 [awk <defunct>]
> 22124 ? T 0:00 awk -v
> progname=/etc/cron.daily/makewhatis.cron progn
> 22126 ? Z 0:00 [awk <defunct>]
> 22168 ? T 0:00 /bin/awk
> 22172 ? Z 0:00 [awk <defunct>]
>
>
> 21919 ? S 0:00 CROND
> 22086 ? T 0:00 awk -v
> progname=/etc/cron.daily/00webalizer progname
> 22088 ? Z 0:00 [awk <defunct>]
> 22124 ? T 0:00 awk -v
> progname=/etc/cron.daily/makewhatis.cron progn
> 22126 ? Z 0:00 [awk <defunct>]
> 22168 ? T 0:00 /bin/awk
> 22172 ? Z 0:00 [awk <defunct>]
>
>
> I didnt see these processes earlier. There are some "chmod"
> also in it. Is it being compromised?
>
>
>
> PS I've applied all the relevant patches after installing OS
> (at least that's what I think)
>
>
>
> Please help me....Also please guide me to something where I
> can learn about security measures needed for a web server.
>
>
>
> Thanks in advance
>
>
***********************************************************************************
Information contained in this email message is intended only for use of the individual or entity named above. If the reader of this message is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please immediately notify the postmaster at nds.com and destroy the original message.
***********************************************************************************
More information about the redhat-list
mailing list