• RSS
  • Twitter
  • FaceBook

Security Forums

Log in

FAQ | Search | Usergroups | Profile | Register | RSS | Posting Guidelines | Recent Posts

"find" unix command running by itself

Users browsing this topic:0 Security Fans, 0 Stealth Security Fans
Registered Security Fans: None
Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Macintosh

View previous topic :: View next topic  
Author Message
mk2000
Just Arrived
Just Arrived


Joined: 26 Jul 2006
Posts: 0


Offline

PostPosted: Wed Jul 26, 2006 7:34 am    Post subject: "find" unix command running by itself Reply with quote

Something strange happened to my G5.

The "find" unix command started running by itself in the background.

I noticed intense disk activity and brough up top and instantly saw "find" actively running. What it was trying to find I have no idea.

I'm running Mac OS X 10.4.7 using FileVault with Spotlight turned off.

The only network service open was Windows Sharing. I use the application EasyFind to find my files but that is not suppose to run any kind of indexing service.

I immediately turned off Windows Sharing and disconnected my Ethernet.
I ran ps -aux but by the time I did it, the find command had already stopped.
I checked my logs (console, system, smb) but nothing out of the ordinary appeared.

I'm a Mac Specialist at a University but I don't recall any Macs having "find" start to run for no reason. Any ideas?

Thanks.

Fernando
Back to top
View user's profile Send private message
capi
SF Senior Mod
SF Senior Mod


Joined: 21 Sep 2003
Posts: 16777097
Location: Portugal

Offline

PostPosted: Wed Jul 26, 2006 8:02 am    Post subject: Reply with quote

Hello, mk2000, welcome to SFDC!

One possible reason for commands running without interaction is if they're being run by the cron daemon. Have you checked any cron jobs you might have? There could be some script that uses "find" to do something.
Back to top
View user's profile Send private message
Sunnet Beskerming
Just Arrived
Just Arrived


Joined: 14 Jul 2006
Posts: 0
Location: Australia

Offline

PostPosted: Tue Aug 01, 2006 8:56 am    Post subject: A couple of extra options Reply with quote

Hi Fernando,

It could be possible that the 'locate' command was building a locate database on one of the Windows shares and the termination of the connection prevented it from completing it's task (although it may not use 'find' to do this).

The other extreme possibility is that there might be a bug in Apple's SMB implementation similar to the one that has recently been patched in Windows and someone has connected from within the University network and somehow gained shell access (this would make it much worse than the Windows issue if it was the case, as Windows was only a DoS, not arbitrary code exec.).
Back to top
View user's profile Send private message Send e-mail Visit poster's website AIM Address Yahoo Messenger MSN Messenger
Display posts from previous:   

Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Macintosh All times are GMT + 2 Hours
Page 1 of 1


 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Community Area

Log in | Register