New User? Register here - Existing Users: Username: Password: [Advanced Login]

 

 

Current Poll

Your preferred Interactive shell?









( 1358 votes ~ 15 comments )

 

Weblog entry #8 for sneex

Strange Command
Posted by sneex on Wed 8 Apr 2009 at 14:29
Tags: none.
Recently I came across this command running in the morning time-frame on my system:

su nobody -s /bin/sh -c /usr/bin/find / -ignore_readdir_race \( -fstype NFS -o -fstype nfs -o -fstype nfs4 -o -fstype afs -o -fstype binfmt_misc -o -fstype proc -o -fstype smbfs -o -fstype autofs -o -fstype iso9660 -o -fstype ncpfs -o -fstype coda -o -fstype devpts -o -fstype ftpfs -o -fstype devfs -o -fstype mfs -o -fstype shfs -o -fstype sysfs -o -fstype cifs -o -fstype lustre_lite -o -fstype tmpfs -o -fstype usbfs -o -fstype udf -o -type d -regex '\(^/tmp$\)\|\(^/usr/tmp$\)\|\(^/var/tmp$\)\|\(^/afs$\)\|\(^/amd$\)\|\(^/alex$\)\|\(^/var/spool$\)\|\(^/sfs$\)\|\(^/media$\)' \) -prune -o -print0

I know *what* it is doing but I am not sure where it is coming from... Has anyone seen this command or one similar to it? Any ideas about it and where it could be hiding would be most helpful :)

 

Comments on this Entry

Posted by Anonymous (194.17.xx.xx) on Wed 8 Apr 2009 at 15:08
/etc/cron.daily/find

[ Parent | Reply to this comment ]

Posted by Anonymous (79.218.xx.xx) on Wed 8 Apr 2009 at 15:37
...yes, looks like the update job for the "locate"-DB
Have a look at your /etc/updatedb.conf

[ Parent | Reply to this comment ]

 

 

Flattr