Subject: Suspicious shared memory segments after boot
To: NetBSD current <current-users@netbsd.org>
From: Nicolas Joly <njoly@pasteur.fr>
List: current-users
Date: 01/22/2008 00:14:02
Hi,
I just discovered that one of my i386 machine running an up-to-date
-current shows suspicious shared memory segments. They are present
early after boot when i log in.
njoly@cixy [~]> uname -a
NetBSD cixy.dial.pasteur.fr 4.99.49 NetBSD 4.99.49 (GENERIC) #15: Mon Jan 21 09:59:10 CET 2008 njoly@cixy.dial.pasteur.fr:/local/src/NetBSD/obj.i386/sys/arch/i386/compile/GENERIC i386
njoly@cixy [~]> ipcs -a
IPC status from <running system> as of Mon Jan 21 23:45:05 2008
Message Queues:
T ID KEY MODE OWNER GROUP CREATOR CGROUP CBYTES QNUM QBYTES LSPID LRPID STIME RTIME CTIME
Shared Memory:
T ID KEY MODE OWNER GROUP CREATOR CGROUP NATTCH SEGSZ CPID LPID ATIME DTIME CTIME
m 20 -1063675643 --r-----r-a 3231291653 wheel 3231291653 wheel -1063675643 0 0 -1063675643 no-entry 22:32:37 no-entry
m 22 -1063675643 --r-----r-a 3231291653 wheel 3231291653 wheel -1063675643 0 0 -1063675643 no-entry 22:32:37 no-entry
m 24 -1063675643 --r-----r-a 3231291653 wheel 3231291653 wheel -1063675643 0 0 -1063675643 no-entry 22:32:37 no-entry
m 26 -1063675643 --r-----r-a 3231291653 wheel 3231291653 wheel -1063675643 0 0 -1063675643 no-entry 22:32:37 no-entry
m 28 -1063675643 --r-----r-a 3231291653 wheel 3231291653 wheel -1063675643 0 0 -1063675643 no-entry 22:32:37 no-entry
m 30 -1063675643 --r-----r-a 3231291653 wheel 3231291653 wheel -1063675643 0 0 -1063675643 no-entry 22:32:37 no-entry
m 32 -1063675643 --r-----r-a 3231291653 wheel 3231291653 wheel -1063675643 0 0 -1063675643 no-entry 22:32:37 no-entry
Semaphores:
T ID KEY MODE OWNER GROUP CREATOR CGROUP NSEMS OTIME CTIME
Anybody else ? Any idea where to look ?
--
Nicolas Joly
Biological Software and Databanks.
Institut Pasteur, Paris.