Bug 91214 - creates /proc entries not available to ' ps -aux '
creates /proc entries not available to ' ps -aux '
Status: CLOSED ERRATA
Product: Red Hat Linux
Classification: Retired
Component: bind (Show other bugs)
9
i686 Linux
medium Severity medium
: ---
: ---
Assigned To: Daniel Walsh
Ben Levenson
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2003-05-19 20:01 EDT by Need Real Name
Modified: 2007-04-18 12:53 EDT (History)
0 users

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2003-08-11 20:01:48 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Need Real Name 2003-05-19 20:01:04 EDT
From Bugzilla Helper:
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 
1.0.3705; .NET CLR 1.1.4322)

Description of problem:
Booting in run level 3 with 'named' on, adds 3 entries to the /proc directory. 
These processes are not visible when using the 'ps -aux' commands. 
Using chkrootkit it verifies the existence of the unlisted processes.
Trying to cd into these directories, they change location making it impossible 
for further investigation. 
This happens on a machine NEVER loaded onto any network.


Version-Release number of selected component (if applicable):
bind-9.2.1-16

How reproducible:
Always

Steps to Reproduce:
1.Rebuilt new machines x5, fully patch and 'chkrootkit'
2.Complete new setup - and machine never added to a network, fully patched, 
manual check and 'chkrootkit'
3.Change hardware (within i686) and replicated with all the same tests
    

Actual Results:  Always the same result...3 hidden processes that the process 
manger will not see.
'chkrootkit' views it as a possible lkm

Expected Results:  All process should be registered with the process manager

Additional info:

Each and every time the machine is fully patched.
RH9 - 2.4.20-13.9
Comment 1 Need Real Name 2003-08-11 20:01:48 EDT
fixed in recent kernel patch.

Note You need to log in before you can comment on or make changes to this bug.