curious root find running

[Rolf G Nielsen]

brad clawsie wrote:
> hi
> 
> while sitting at my computer tonight i noticed a great deal of disk
> activity. i found that this process was running:
> 
> $ ps -auxwww 1463
> USER   PID %CPU %MEM   VSZ   RSS  TT  STAT STARTED      TIME COMMAND
> root  1463  4.3  0.1  1876  1404  ??  D     3:01AM   0:07.26 find /usr
> -xdev -type f ( -perm -u+x -or -perm -g+x -or -perm -o+x ) ( -perm
> -u+s -or -perm -g+s ) -print0
> 
> any idea why this is running? is it part of a sanctioned background
> process?
> 
> thanks!
> brad
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
> 
> 
> 

It's part of the nightly security check. Check out the periodic(8) man 
page and the scripts in the subdirectories of /etc/periodic. The command 
you had running is in /etc/periodic/security/100.chksetuid.

-- 

Sincerly,

Rolf Nielsen