curious root find running
Rolf G Nielsen
listreader at lazlarlyricon.com
Fri Aug 17 08:22:34 PDT 2007
brad clawsie wrote:
> hi
>
> while sitting at my computer tonight i noticed a great deal of disk
> activity. i found that this process was running:
>
> $ ps -auxwww 1463
> USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND
> root 1463 4.3 0.1 1876 1404 ?? D 3:01AM 0:07.26 find /usr
> -xdev -type f ( -perm -u+x -or -perm -g+x -or -perm -o+x ) ( -perm
> -u+s -or -perm -g+s ) -print0
>
> any idea why this is running? is it part of a sanctioned background
> process?
>
> thanks!
> brad
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
>
>
>
It's part of the nightly security check. Check out the periodic(8) man
page and the scripts in the subdirectories of /etc/periodic. The command
you had running is in /etc/periodic/security/100.chksetuid.
--
Sincerly,
Rolf Nielsen
More information about the freebsd-questions
mailing list