Date: Tue, 23 Jul 2002 10:33:13 +0300 (EEST) From: Evren Yurtesen <yurtesen@ispro.net.tr> To: Brett Glass <brett@lariat.org> Cc: security@freebsd.org Subject: Re: "Text file busy" Message-ID: <20020723103201.M86108-100000@finland.ispro.net.tr> In-Reply-To: <4.3.2.7.2.20020723002551.02245100@localhost>
next in thread | previous in thread | raw e-mail | index | archive | help
if a program is running and locked the file. I believe you can see which file is open by which process with fstat command On Tue, 23 Jul 2002, Brett Glass wrote: > A FreeBSD server belonging to a client of mine has begun to report "Text > file busy" in response to common commands. I can't see anything unusual > on the surface, but am concerned that the server may have been > compromised anyway (a rootkit could have been installed) and that this is > a symptom. What mechanism generates this message? And does it suggest > that the machine may have been rooted? > > --Brett Glass > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020723103201.M86108-100000>