On 2025-10-29 08:42:46 +0000, Richard Lewis wrote: > maybe - is this just a (rather unlikely?) race where the file was removed > by systemd halfway through? or is there a way to reproduce it?
Yes, probably a race condition. It is a unlikely (at least on this machine under usual conditions), but it can occur in practice, and it is very easy to reproduce the race condition with the following zsh script running in /var/tmp: while true ; do d=dir-$RANDOM ; mkdir $d ; rmdir $d ; done Searching for suspect PHP files... /bin/find: ‘/var/tmp/dir-24416’: No such file or directory not found So, if some machine has some process running that involves a series of creation and removal of directories, this could trigger the error. This is particularly bad as a non-root user can perturb chkrootkit (intentionally or not). BTW, I ran the above script as a normal user. -- Vincent Lefèvre <[email protected]> - Web: <https://www.vinc17.net/> 100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/> Work: CR INRIA - computer arithmetic / Pascaline project (LIP, ENS-Lyon)
