| View previous topic :: View next topic |
| Author |
Message |
mauricev
Apprentice
Joined: 22 Mar 2004
Posts: 198
|
 Posted: Fri May 27, 2022 1:53 pm Post subject: [SOLVED] Who is looking for history files? |
 |
|
Sometimes I see this in htop
| Code: | | /usr/bin/find // -name .*history ( -links 2 -o -type l) |
or sometimes it’s this
| Code: | | /usr/bin/find // -name .*history -size 0 |
Where might this be coming from?
Last edited by mauricev on Fri May 27, 2022 5:00 pm; edited 2 times in total |
|
| Back to top |
|
 |
Hu
Moderator
Joined: 06 Mar 2007
Posts: 21633
|
| Posted: Fri May 27, 2022 3:40 pm Post subject: |
|
|
| What is the parent process of this find? As what user does it run? My guess is that a cronjob or similar is running it. That double slash looks suspiciously like an unset variable was used. |
|
| Back to top |
|
|
mauricev
Apprentice
Joined: 22 Mar 2004
Posts: 198
|
| Posted: Fri May 27, 2022 4:59 pm Post subject: |
|
|
| You are correct. I have a cron script for running chkrootkit. Thanks. |
|
| Back to top |
|
|
|
Other Things Gentoo
