Spawned telnetd processes

Spawned telnetd processes

Post by Alex Powel » Fri, 21 Aug 1998 04:00:00



Hello,

Lately, some strange things have been happening on my FreeBSD 2.2.5 system.
The most noticeable is that at least twice a day when I telnet into the
server I am placed on ttyp1 or ttyp2 when no one is logged in.  Here are the
results of the 'ps aux' command when this happens:

USER       PID %CPU %MEM   VSZ  RSS  TT  STAT STARTED       TIME COMMAND
root      4874  0.0  0.5   484  696  p1  R+    8:36AM    0:00.00 ps -aux
root         1  0.0  0.2   476  236  ??  Is   Mon08PM    0:00.04
/sbin/init --
root         2  0.0  0.0     0   12  ??  DL   Mon08PM    0:00.00
(pagedaemon)
root         3  0.0  0.0     0   12  ??  DL   Mon08PM    0:00.00  (vmdaemon)
root         4  0.0  0.0     0   12  ??  DL   Mon08PM    2:24.65  (update)
root        77  0.0  0.4   208  552  ??  Ss   Mon08PM    0:01.92 syslogd
root        85  0.0  0.6   424  816  ??  S<s  Mon08PM    0:24.86 xntpd -c
/etc/
daemon      89  0.0  0.4   176  452  ??  Is   Mon08PM    0:00.11 portmap -v
root       110  0.0  0.4   204  540  ??  Is   Mon08PM    0:01.20 inetd
root       113  0.0  0.4   336  516  ??  Is   Mon08PM    0:03.33 cron
root       131  0.0  0.6   560  808  ??  Is   Mon08PM    0:00.95 sendmail:
acce
root       170  0.0  0.3   648  368  ??  Ss   Mon08PM    0:18.31
/usr/local/etc
root       188  0.0  0.4   180  528  v0  Is+  Mon08PM    0:00.02
/usr/libexec/g
root       189  0.0  0.4   180  528  v1  Is+  Mon08PM    0:00.02
/usr/libexec/g
root       190  0.0  0.4   180  528  v2  Is+  Mon08PM    0:00.02
/usr/libexec/g
nobody    3405  0.0  0.5   696  584  ??  I    12:44PM    0:00.26
/usr/local/etc
nobody    3589  0.0  0.3   648  396  ??  I     3:24PM    0:00.00
/usr/local/etc
root      4370  0.0  0.5   212  580  ??  Is    1:38AM    0:00.44 telnetd
root      4371  0.0  0.6   644  824  p0  Is+   1:38AM    0:00.18 -bash
(bash)
nobody    4499  0.0  0.5   696  576  ??  I     2:32AM    0:00.09
/usr/local/etc
nobody    4500  0.0  0.5   696  576  ??  I     2:32AM    0:00.14
/usr/local/etc
nobody    4806  0.0  0.4   684  560  ??  I     8:12AM    0:00.07
/usr/local/etc
nobody    4807  0.0  0.5   696  572  ??  I     8:12AM    0:00.03
/usr/local/etc
nobody    4808  0.0  0.5   696  572  ??  I     8:12AM    0:00.03
/usr/local/etc
root      4840  0.0  0.5   212  580  ??  Ss    8:33AM    0:00.13 telnetd
apowell   4841  0.0  0.6   656  756  p1  Is    8:33AM    0:00.12 -bash
(bash)
root      4851  0.0  0.6   636  752  p1  S     8:33AM    0:00.13 su (bash)
root         0  0.0  0.0     0    0  ??  DLs  Mon08PM    0:00.19  (swapper)

Above, you can see at processes 4370 and 4371, root has opened up telnetd
and bash as itself.  What does this mean, and how might I prevent it if it
is a security risk?

Alex Powell

 
 
 

1. spawned processes and process interdependencies

With Linux is it possible for a process to spawn subprocesses in such a
way that when the main process dies its subprocesses will automatically
die with it?

I'm trying to figure out this: Suppose one starts two instances of a
program. Each instance spawns subprocesses. But one of the instances gets
hosed up. How can one know which subprocesses were spawned by which
instance?

2. ntpdate on Linux

3. telnetd, how many can be spawn from inetd

4. DAC960 oops

5. telnetd process core dumps when handing off to login process

6. German User Guide for Linux released

7. Apache can't spawn child process

8. Used HP9000/K220

9. Spawning a process without wait not possible?

10. Spawning a child process

11. Prob spawning a process in my module ..

12. UID for Web Spawned processes

13. cannot spawn child process