From owner-freebsd-questions@FreeBSD.ORG Thu Jul 3 10:48:05 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id EA15D477 for ; Thu, 3 Jul 2014 10:48:05 +0000 (UTC) Received: from mail-qc0-x22d.google.com (mail-qc0-x22d.google.com [IPv6:2607:f8b0:400d:c01::22d]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 9889727DF for ; Thu, 3 Jul 2014 10:48:05 +0000 (UTC) Received: by mail-qc0-f173.google.com with SMTP id l6so17770qcy.4 for ; Thu, 03 Jul 2014 03:48:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=seibercom.net; s=google; h=date:from:to:subject:message-id:in-reply-to:references:reply-to :organization:mime-version:content-type; bh=7Ezucto3+B8yuEUlCYRaxSVclDdMPSkPE4sq+N0Ms/U=; b=FOI/eSsIlz/T0HQzoR3bsjWqfiHc3xpHeAjiAi09TVNyZOVIQz14TcAkQc9RCkghG9 ridkzO4fpkYeHiUaIH97KMh2CjTdpbnYQORGHhdzT1l6VHNOq0af280nAFQHDZ7/Iwwn SL/t455kp3S6J9dNAsNqfkTlbJJlD9SmLUJNk= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:date:from:to:subject:message-id:in-reply-to :references:reply-to:organization:mime-version:content-type; bh=7Ezucto3+B8yuEUlCYRaxSVclDdMPSkPE4sq+N0Ms/U=; b=l4rzhjujFNwykdGyzXbJKPnc7b8CYoNPA0B2qerDJ8pl6UbX9vXEZ1/HR5qW/XCptV dPH7V6jEOHsDVf4AgQV8RAZvJ1EhaH76gRSHEyF35wAXo4IBDlV1EppUpi+o+9kNh7RA iNL4be/kKp0t10MySyz25SDuueOX/chNkdc+ClKOrSRyAj8j+HQJEV72Pzi2gqQzUzQ5 +W2mL+lPVtQn6Her0HjeO+z3ZUv+qUSWk2TK0nhr0PGNdFrxOSBD5xE3wcKaXYVukh79 11mIw7OFhhsctr/xTG8Zb5imy8xtcqa+1IjjoDpyBrhGd/J4XsfeMB21bUbnv3BAg4Dp dJFw== X-Gm-Message-State: ALoCoQl1NBuPKo/T41sHVs3ckPEUKnj+xEJK2MSerR8Jcv2wyFNux6M44BJXyY4iXyXY8xQsfMIN X-Received: by 10.224.26.18 with SMTP id b18mr6077049qac.20.1404384484484; Thu, 03 Jul 2014 03:48:04 -0700 (PDT) Received: from scorpio.seibercom.net (cpe-076-182-104-150.nc.res.rr.com. [76.182.104.150]) by mx.google.com with ESMTPSA id j4sm48786823qaf.31.2014.07.03.03.48.03 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 03 Jul 2014 03:48:04 -0700 (PDT) Received: from scorpio (cpe-076-182-104-150.nc.res.rr.com [76.182.104.150]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: jerry@seibercom.net) by scorpio.seibercom.net (Postfix) with ESMTPSA id 3h3wxt6CSDz3FML0 for ; Thu, 3 Jul 2014 06:48:02 -0400 (EDT) X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.98.4 at scorpio.seibercom.net Date: Thu, 3 Jul 2014 06:47:54 -0400 From: Jerry To: freebsd-questions@freebsd.org Subject: Re: Security Warning Message-ID: <20140703064754.78407425@scorpio> In-Reply-To: <53B53096.3070600@freebsd.org> References: <20140703055740.0f94e5e1@scorpio> <53B53096.3070600@freebsd.org> Reply-To: User questions Organization: seibercom NET X-Mailer: Claws Mail 3.10.1 (GTK+ 2.24.22; amd64-portbld-freebsd10.0) MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; boundary="Sig_/b0VwMiWIG8UQf1m065/WF+1"; protocol="application/pgp-signature" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Jul 2014 10:48:06 -0000 --Sig_/b0VwMiWIG8UQf1m065/WF+1 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On Thu, 03 Jul 2014 11:29:42 +0100, Matthew Seaman stated: >On 07/03/14 10:57, Jerry wrote: >> Thu, 3 Jul 2014 05:55:05 -0400 >>=20 >> FreeBSD-10 / amd64 >>=20 >> Every morning I receive a security email with the following notations: >>=20 >> Checking setuid files and devices: >> find: /usr/share/groff_font/devX100/CI: Bad file descriptor >> find: /usr/share/groff_font/devX100/S: Bad file descriptor >>=20 >> Checking negative group permissions: >> find: /usr/share/groff_font/devX100/CI: Bad file descriptor >> find: /usr/share/groff_font/devX100/S: Bad file descriptor >>=20 >> Is there something seriously wrong here, or can I safely ignore it? >>=20 > >What do you see if you try and read the contents of those files? Smells >like a filesystem problem to me, in which case you should unmount that >partition (given it's /usr that implies taking the system down to single >user mode) and run fsck against it repeatedly until fsck tells you the >filesystem is clean. > >I'm assuming this is a UFS system -- if it's ZFS then none of the above >applies, but also, you probably wouldn't see an error like that either. > > Cheers, > > Matthew If I try to read them, I just get: "Bad file descriptor" Okay, do I restart the system in single user mode and then run: "fsck-f" until I don't receive any errors, or do I begin with: "umount -af" first? I am assuming I do not umount "root" (use the -A flag). --=20 Jerry --Sig_/b0VwMiWIG8UQf1m065/WF+1 Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBAgAGBQJTtTThAAoJEElTsHIJnX8eKNUIAJKJzQ9QOi+hrhgX83x16Vxz E/Rz8dOvuIq8K7uUt6qJBsg0UwWq+DqavGtVN2a/HTYcfTiTLySAw2mgRW9PqxNr noKmCKQISn9fGYZZMWvSYL7zCFY0ddVN06s1jfvjjYxCnXeJaDZ/MO2bYfUHRduD SZDTBtljl67dyAO/zcEtTZ9EjVqUaW+QS8L09sbCMmQJZZWfiPn2oIUbsMn9oBhD GzMvYER8eGUX88xl7e+SLxFKhbXPmkc0Xxc/pqdpXvsClrJY16U6X+XHphfoLul5 vF+dQ0vZ8VmFVwxDuzpXsERxyErfA7w0PIAoKSsmCSTyf4WCp0q3Z8YqIxG6g/Q= =ztiX -----END PGP SIGNATURE----- --Sig_/b0VwMiWIG8UQf1m065/WF+1--