Date: Tue, 23 Jul 2002 02:04:21 -0600 From: Colin Faber <cfaber@fpsn.net> To: Evren Yurtesen <yurtesen@ispro.net.tr> Cc: Brett Glass <brett@lariat.org>, security@FreeBSD.ORG Subject: Re: "Text file busy" Message-ID: <3D3D0E05.B966A72D@fpsn.net> References: <20020723103201.M86108-100000@finland.ispro.net.tr>
next in thread | previous in thread | raw e-mail | index | archive | help
Common cause: Samba Normally you'll see this when you've got someone hacking up a file with something like wordpad etc. Which may set the lock but fails to remove it, thus samba keeps the lock in tact and you receive that error. Evren Yurtesen wrote: > > if a program is running and locked the file. > I believe you can see which file is open by which process > with fstat command > > On Tue, 23 Jul 2002, Brett Glass wrote: > > > A FreeBSD server belonging to a client of mine has begun to report "Text > > file busy" in response to common commands. I can't see anything unusual > > on the surface, but am concerned that the server may have been > > compromised anyway (a rootkit could have been installed) and that this is > > a symptom. What mechanism generates this message? And does it suggest > > that the machine may have been rooted? > > > > --Brett Glass > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message -- Colin Faber (303) 736-5160 fpsn.net, Inc. * Black holes are where God divided by zero. * To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3D3D0E05.B966A72D>