Gentoo Logo
Gentoo Spaceship




Note: Due to technical difficulties, the Archives are currently not up to date. GMANE provides an alternative service for most mailing lists.
c.f. bug 424647
List Archive: gentoo-security
Navigation:
Lists: gentoo-security: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: gentoo-security@g.o
From: William Yang <wyang@...>
Subject: Re: Strange occurrence of sendmail and disk I/O in background....
Date: Tue, 26 Feb 2008 07:44:47 -0500
Christopher P. Kern wrote:
> Can anyone tell me what service/application would start sendmail?

Cron would.  And your message makes it sounds like 
cron/vixie-cron/anacron/etc may have been involved.

If you have a crontab entry that doesn't control output (stderr and 
stdout), you could have a large file of output that's been queued by cron. 
  That could explain the disk activity and an outbound SMTP connection.

Why it's sending mail to that specific address is another story.  It sounds 
like you're using sendmail, but /usr/sbin/sendmail could be any of several 
mailer packages.  You need to look at how the mail program is configured.

While it's possible that someone else now owns your box (and you should be 
prepared to deal with that), it's also possible--based solely on what I've 
read in your message--that this is a simple misconfiguration.  Before you 
go re-imaging the system, you probably want to analyze what's going on 
fully... rebuilding, in my experience, isn't a great strategy for fixing 
configuration problems.

	-Bill
-- 
William Yang
wyang@...
-- 
gentoo-security@g.o mailing list


References:
Strange occurrence of sendmail and disk I/O in background....
-- Christopher P. Kern
Navigation:
Lists: gentoo-security: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
Re: Strange occurrence of sendmail and disk I/O in background....
Next by thread:
Take Bachelors of your desire
Previous by date:
Re: Kernel Security + KISS
Next by date:
Encryption Ciphers


Updated Jun 17, 2009

Summary: Archive of the gentoo-security mailing list.

Donate to support our development efforts.

Copyright 2001-2013 Gentoo Foundation, Inc. Questions, Comments? Contact us.