[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] find: /proc/5/fd: Permission denied



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> > Checking `sniffer'... /proc/5/fd: Permission denied

I don't think this is a chkrootkit problem. Just running "find" (as root) on 
my RaQ 4 generates the same error:

[root /root]# find / -name "foobar.txt" -print
find: /proc/5/fd: Permission denied

[root /root]# ls -alF /proc/5/fd
ls: /proc/5/fd: Permission denied

[root /root]# ls -alF /proc/5
ls: /proc/5/exe: Permission denied
ls: /proc/5/root: Permission denied
ls: /proc/5/cwd: Permission denied
total 0
dr-xr-xr-x    3 root root     0 Apr 19 05:51 ./
dr-xr-xr-x   32 root root     0 Apr 13 14:13 ../
- -r--r--r--    1 root root     0 Apr 19 05:51 cmdline
lrwx------    1 root root     0 Apr 19 05:51 cwd
- -r--------    1 root root     0 Apr 19 05:51 environ
lrwx------    1 root root     0 Apr 19 05:51 exe
dr-x------    2 root root     0 Apr 19 05:51 fd/
pr--r--r--    1 root root     0 Apr 19 05:51 maps|
- -rw-------    1 root root     0 Apr 19 05:51 mem
lrwx------    1 root root     0 Apr 19 05:51 root
- -r--r--r--    1 root root     0 Apr 19 05:51 stat
- -r--r--r--    1 root root     0 Apr 19 05:51 statm
- -r--r--r--    1 root root     0 Apr 19 05:51 status


Just for ha-has I took a look at /proc/4. I have no idea if they should be the 
same or not, but here's what I got:

[root /root]# ls -alF /proc/4
ls: /proc/4/exe: No such file or directory
total 0
dr-xr-xr-x    3 root root     0 Apr 19 05:54 ./
dr-xr-xr-x   32 root root     0 Apr 13 14:13 ../
- -r--r--r--    1 root root     0 Apr 19 05:54 cmdline
lrwx------    1 root root     0 Apr 19 05:54 cwd -> //
- -r--------    1 root root     0 Apr 19 05:54 environ
lrwx------    1 root root     0 Apr 19 05:54 exe
dr-x------    2 root root     0 Apr 19 05:54 fd/
pr--r--r--    1 root root     0 Apr 19 05:54 maps|
- -rw-------    1 root root     0 Apr 19 05:54 mem
lrwx------    1 root root     0 Apr 19 05:54 root -> //
- -r--r--r--    1 root root     0 Apr 19 05:54 stat
- -r--r--r--    1 root root     0 Apr 19 05:54 statm
- -r--r--r--    1 root root     0 Apr 19 05:54 status

[root /root]# ls -alF /proc/4/fd
total 0
dr-x------    2 root root     0 Apr 19 05:53 ./
dr-xr-xr-x    3 root root     0 Apr 19 05:53 ../
lrwx------    1 root root    64 Apr 19 05:53 10 -> /dev/initctl|



And another FWIW - on my Fedora machine, I don't get the "permission denied" 
problem:

[root@localhost root]# find / -name "foobar.txt" -print
[root@localhost root]# ls -alF /proc/5/fd
total 0
dr-x------  2 root root 0 Apr 19 05:55 ./
dr-xr-xr-x  3 root root 0 Apr 19 05:55 ../
[root@localhost root]# ls -alF /proc/5
ls: cannot read symbolic link /proc/5/exe: No such file or directory
total 0
dr-xr-xr-x    3 root root 0 Apr 19 05:55 ./
dr-xr-xr-x  117 root root 0 Apr 16 02:47 ../
- -r--r--r--    1 root root 0 Apr 19 05:55 binfmt
- -r--r--r--    1 root root 0 Apr 19 05:55 cmdline
lrwxrwxrwx    1 root root 0 Apr 19 05:55 cwd -> //
- -r--------    1 root root 0 Apr 19 05:55 environ
lrwxrwxrwx    1 root root 0 Apr 19 05:55 exe
dr-x------    2 root root 0 Apr 19 05:55 fd/
- -r--------    1 root root 0 Apr 19 05:55 maps
- -rw-------    1 root root 0 Apr 19 05:55 mem
- -r--r--r--    1 root root 0 Apr 19 05:55 mounts
lrwxrwxrwx    1 root root 0 Apr 19 05:55 root -> //
- -r--r--r--    1 root root 0 Apr 19 05:55 stat
- -r--r--r--    1 root root 0 Apr 19 05:55 statm
- -r--r--r--    1 root root 0 Apr 19 05:55 status

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFAg8yXhI2So2rhOmcRAuU8AKCNxz21w885WYwyXCA03Wdr1HxWWwCgqwuf
t+HCSrJkOoreJjiNrZ9+Rcs=
=ia9F
-----END PGP SIGNATURE-----