Date: Fri, 17 Aug 2007 13:39:11 +0200 From: Rolf G Nielsen <listreader@lazlarlyricon.com> To: brad clawsie <clawsie@fastmail.fm> Cc: freebsd-questions@freebsd.org Subject: Re: curious root find running Message-ID: <46C588DF.1050700@lazlarlyricon.com> In-Reply-To: <20070817101935.GA1064@localhost.gateway.2wire.net> References: <20070817101935.GA1064@localhost.gateway.2wire.net>
next in thread | previous in thread | raw e-mail | index | archive | help
brad clawsie wrote: > hi > > while sitting at my computer tonight i noticed a great deal of disk > activity. i found that this process was running: > > $ ps -auxwww 1463 > USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND > root 1463 4.3 0.1 1876 1404 ?? D 3:01AM 0:07.26 find /usr > -xdev -type f ( -perm -u+x -or -perm -g+x -or -perm -o+x ) ( -perm > -u+s -or -perm -g+s ) -print0 > > any idea why this is running? is it part of a sanctioned background > process? > > thanks! > brad > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > > > It's part of the nightly security check. Check out the periodic(8) man page and the scripts in the subdirectories of /etc/periodic. The command you had running is in /etc/periodic/security/100.chksetuid. -- Sincerly, Rolf Nielsen
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?46C588DF.1050700>