From owner-freebsd-current Fri Jun 26 03:05:07 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id DAA13017 for freebsd-current-outgoing; Fri, 26 Jun 1998 03:05:07 -0700 (PDT) (envelope-from owner-freebsd-current@FreeBSD.ORG) Received: from bmccane.maxbaud.net (isdn-gateway1.maxbaud.net [208.155.166.1]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id DAA12997 for ; Fri, 26 Jun 1998 03:04:51 -0700 (PDT) (envelope-from root@bmccane.maxbaud.net) Received: from localhost (root@localhost) by bmccane.maxbaud.net (8.8.8/8.8.8) with SMTP id FAA29706; Fri, 26 Jun 1998 05:04:33 -0500 (CDT) (envelope-from root@bmccane.maxbaud.net) Date: Fri, 26 Jun 1998 05:04:33 -0500 (CDT) From: Wm Brian McCane To: Joel Ray Holveck cc: current@FreeBSD.ORG Subject: Re: bmccane security check output In-Reply-To: <199806201950.OAA17716@detlev.UUCP> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Sat, 20 Jun 1998, Joel Ray Holveck wrote: > > I am getting this in my mail every night from the nightly security > > run. I can't remove the file with `rm', so I wrote a program called > > `unlink' which just calls unlink(2) on the file you specify. This > > eliminates the file(s), then the next night a couple of new ones appear in > > the list. Any ideas? > > checking setuid files and devices: > > find: /var/spool/mqueue/dfAAA05376: Bad file descriptor > > find: /var/spool/.hoststat/net./snet./mail: Bad file descriptor > > find: /var/spool/.hoststat/net./imagin.: Bad file descriptor > > find: /var/spool/.hoststat/com./juno./mx./a: Bad file descriptor > > It would appear that an fsck is decidedly in order. > > Happy hacking, > joelh > Tried that. I rebooted in single user mode the first day I noticed it. It didn't help a bit. The truly odd thing is it is always 4 files that are screwed up. I have also never seen it happen on new files, just old ones. Any other ideas? brian BTW> Last night it started saying /lkm/.o I'm starting to get a little nervous 8). To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message