Gentoo Archives: gentoo-server

From: Ben Munat <bent@×××××.com>
To: gentoo-server@l.g.o
Subject: Re: [gentoo-server] "restart daemon" notification
Date: Fri, 03 Jun 2005 03:16:16
Message-Id: 429FCE93.2000709@munat.com
In Reply to: Re: [gentoo-server] "restart daemon" notification by Ned Ludd
1 Ned Ludd wrote:
2 > On Thu, 2005-06-02 at 09:16 -0700, Ben Munat wrote:
3 >
4 >>Patrick Witte wrote:
5 >> >
6 >>
7 >>># lsof | grep DEL
8 >>>
9 >>>will output a list 'open' files that have been deleted or changed in
10 >>>filesystem but are still kept in memory.
11 >>>
12 >>
13 >>That lsof is pretty neat... any idea why I would have dozens of files open -- across many
14 >>different processes -- under /var/tmp/portage? Isn't that directory just used while emerging?
15 >
16 >
17 > This might be a security problem.
18 > Can you send me the output of lsof /var/tmp/portage
19 >
20
21 Well that's weird: I get nothing for lsof /var/tmp/portage. But if I do just lsof without
22 args, I get hundreds of lines of output. Some of it looks like legitamte reports of open
23 files for daemons I have running. But there are also many, many lines like below... all
24 refering to non-existent files under /var/tmp/portage.
25
26 Would love to hear what this is about.
27
28 b
29
30 Here's some sample output; three chunks from different sections of the output:
31
32 authdaemo 1706 root mem REG 3,3 3091732
33 /var/tmp/portage/glibc-2.3.4.20040808-r1/image/lib/libnsl-2.3.4.so\040(deleted) (stat: No
34 such file or directory)
35 authdaemo 1706 root mem REG 3,3 1251304
36 /var/tmp/portage/openssl-0.9.7e-r1/image/usr/lib/libssl.so.0.9.7\040(deleted) (stat: No
37 such file or directory)
38 authdaemo 1706 root mem REG 3,3 1251301
39 /var/tmp/portage/openssl-0.9.7e-r1/image/usr/lib/libcrypto.so.0.9.7\040(deleted) (stat: No
40 such file or directory)
41 authdaemo 1706 root mem REG 3,3 3091917
42 /var/tmp/portage/glibc-2.3.4.20040808-r1/image/lib/libnss_compat-2.3.4.so\040(deleted)
43 (stat: No such file or directory)
44 authdaemo 1706 root mem REG 3,3 3091878
45 /var/tmp/portage/glibc-2.3.4.20040808-r1/image/lib/libnss_nis-2.3.4.so\040(deleted) (stat:
46 No such file or directory)
47 authdaemo 1706 root mem REG 3,3 3091937
48 /var/tmp/portage/glibc-2.3.4.20040808-r1/image/lib/libnss_files-2.3.4.so\040(deleted)
49 (stat: No such file or directory)
50
51 ...
52
53 ntpd 1941 ntp mem REG 3,3 3091937
54 /var/tmp/portage/glibc-2.3.4.20040808-r1/image/lib/libnss_files-2.3.4.so\040(deleted)
55 (stat: No such file or directory)
56 ntpd 1941 ntp mem REG 3,3 3091877
57 /var/tmp/portage/glibc-2.3.4.20040808-r1/image/lib/libm-2.3.4.so\040(deleted) (stat: No
58 such file or directory)
59 ntpd 1941 ntp mem REG 3,3 1251301
60 /var/tmp/portage/openssl-0.9.7e-r1/image/usr/lib/libcrypto.so.0.9.7\040(deleted) (stat: No
61 such file or directory)
62 ntpd 1941 ntp mem REG 3,3 3091733
63 /var/tmp/portage/glibc-2.3.4.20040808-r1/image/lib/libc-2.3.4.so\040(deleted) (stat: No
64 such file or directory)
65 ntpd 1941 ntp mem REG 3,3 3091879
66 /var/tmp/portage/glibc-2.3.4.20040808-r1/image/lib/libdl-2.3.4.so\040(deleted) (stat: No
67 such file or directory)
68 ntpd 1941 ntp mem REG 3,3 3090143
69 /var/tmp/portage/glibc-2.3.4.20040808-r1/image/lib/libnss_dns-2.3.4.so\040(deleted) (stat:
70 No such file or directory)
71 ntpd 1941 ntp mem REG 3,3 3091734
72 /var/tmp/portage/glibc-2.3.4.20040808-r1/image/lib/libresolv-2.3.4.so\040(deleted) (stat:
73 No such file or directory)
74 ntpd 1941 ntp mem REG 3,3 3091917
75 /var/tmp/portage/glibc-2.3.4.20040808-r1/image/lib/libnss_compat-2.3.4.so\040(deleted)
76 (stat: No such file or directory)
77 ntpd 1941 ntp mem REG 3,3 3091732
78 /var/tmp/portage/glibc-2.3.4.20040808-r1/image/lib/libnsl-2.3.4.so\040(deleted) (stat: No
79 such file or directory)
80
81 ...
82
83 mysqld 31977 mysql mem REG 3,3 5612824
84 /var/tmp/portage/glibc-2.3.4.20041102-r1/image/lib/librt-2.3.4.so\040(deleted) (stat: No
85 such file or directory)
86 mysqld 31977 mysql mem REG 3,3 29760 164499 /lib/libwrap.so.0.7.6
87 mysqld 31977 mysql mem REG 3,3 5612957
88 /var/tmp/portage/glibc-2.3.4.20041102-r1/image/lib/libdl-2.3.4.so\040(deleted) (stat: No
89 such file or directory)
90 mysqld 31977 mysql mem REG 3,3 1251304
91 /var/tmp/portage/openssl-0.9.7e-r1/image/usr/lib/libssl.so.0.9.7\040(deleted) (stat: No
92 such file or directory)
93 mysqld 31977 mysql mem REG 3,3 1251301
94 /var/tmp/portage/openssl-0.9.7e-r1/image/usr/lib/libcrypto.so.0.9.7\040(deleted) (stat: No
95 such file or directory)
96 mysqld 31977 mysql mem REG 3,3 5612802
97 /var/tmp/portage/glibc-2.3.4.20041102-r1/image/lib/libpthread-0.10.so\040(deleted) (stat:
98 No such file or directory)
99 mysqld 31977 mysql mem REG 3,3 65168 4078321 /lib/libz.so.1.2.2
100 mysqld 31977 mysql mem REG 3,3 5610555
101 /var/tmp/portage/glibc-2.3.4.20041102-r1/image/lib/libcrypt-2.3.4.so\040(deleted) (stat:
102 No such file or directory)
103 mysqld 31977 mysql mem REG 3,3 5612813
104 /var/tmp/portage/glibc-2.3.4.20041102-r1/image/lib/libnsl-2.3.4.so\040(deleted) (stat: No
105 such file or directory)
106 mysqld 31977 mysql mem REG 3,3 4662822
107 /usr/lib/gcc-lib/i686-pc-linux-gnu/3.3.5/libstdc++.so.5.0.7\040(deleted) (stat: No such
108 file or directory)
109 mysqld 31977 mysql mem REG 3,3 5612955
110 /var/tmp/portage/glibc-2.3.4.20041102-r1/image/lib/libm-2.3.4.so\040(deleted) (stat: No
111 such file or directory)
112 mysqld 31977 mysql mem REG 3,3 4662861
113 /usr/lib/gcc-lib/i686-pc-linux-gnu/3.3.5/libgcc_s.so.1\040(deleted) (stat: No such file or
114 directory)
115 mysqld 31977 mysql mem REG 3,3 5612814
116 /var/tmp/portage/glibc-2.3.4.20041102-r1/image/lib/libc-2.3.4.so\040(deleted) (stat: No
117 such file or directory)
118 mysqld 31977 mysql mem REG 3,3 5612995
119 /var/tmp/portage/glibc-2.3.4.20041102-r1/image/lib/libnss_compat-2.3.4.so\040(deleted)
120 (stat: No such file or directory)
121 --
122 gentoo-server@g.o mailing list