Hi,
I received this warning:
[04:11:08] Warning: The following processes are using deleted files:
[04:11:08] Process: /usr/sbin/pure-authd PID: 2139 File:
/dev/pts/0
I followed instructions here:
http://sourceforge.net/p/rkhunter/wiki/investigate/
root@server:/proc/2139/fd# ls -l
total 0
dr-x------ 2 root root 0 Feb 24 10:18 ./
dr-xr-xr-x 8 root root 0 Feb 24 04:40 ../
lr-x------ 1 root root 64 Feb 24 10:18 0 -> /dev/null
lrwx------ 1 root root 64 Feb 24 10:18 1 -> /dev/pts/0\ (deleted)
lrwx------ 1 root root 64 Feb 24 10:18 2 -> /dev/pts/0\ (deleted)
lrwx------ 1 root root 64 Feb 24 10:18 3 -> socket:[11637400]
I tried to copy files "1" and "2" but ..
root@server:/proc/2139/fd# cp 1 /home/user
cp: cannot open `1' for reading: Input/output error
I think this is perfectly normal (file is no more existent)... so what is the
meaning of this step (according to Sourceforge's URL)?
Thank you
------------------------------------------------------------------------------
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the
conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users
