Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.java.programmer > #8700 > unrolled thread

Unexplained files - why?

Started byMartin Gregorie <martin@address-in-sig.invalid>
First post2011-10-05 00:29 +0000
Last post2011-10-11 11:51 -0400
Articles 6 — 3 participants

Back to article view | Back to comp.lang.java.programmer


Contents

  Unexplained files - why? Martin Gregorie <martin@address-in-sig.invalid> - 2011-10-05 00:29 +0000
    Re: Unexplained files - why? Jeff Higgins <jeff@invalid.invalid> - 2011-10-11 10:28 -0400
      Re: Unexplained files - why? Roedy Green <see_website@mindprod.com.invalid> - 2011-10-11 08:08 -0700
        Re: Unexplained files - why? Martin Gregorie <martin@address-in-sig.invalid> - 2011-10-11 19:38 +0000
      Re: Unexplained files - why? Jeff Higgins <jeff@invalid.invalid> - 2011-10-11 11:41 -0400
        Re: Unexplained files - why? Jeff Higgins <jeff@invalid.invalid> - 2011-10-11 11:51 -0400

#8700 — Unexplained files - why?

FromMartin Gregorie <martin@address-in-sig.invalid>
Date2011-10-05 00:29 +0000
SubjectUnexplained files - why?
Message-ID<j6g8d1$knk$1@localhost.localdomain>
I've just run rkhunter on one of my Linux boxes. It found an unexpected 
pair of files:

/etc/.java/.systemPrefs/.system.lock
/etc/.java/.systemPrefs/.systemRootModFile

Both are empty and are timestamped "May  4 11:58" and so are probably 
connected to an SDK update since I found an archived copy of jdk-6u26-
linux-i586.rpm with a timestamp of "May  4 11:59" on the same machine. 
What is odd is that I installed the same JDK on another machine at the 
same time and it doesn't have these odd files or the /etc/.java directory 
in its filing system.

So, have any of you seen these files or know why they were created?


-- 
martin@   | Martin Gregorie
gregorie. | Essex, UK
org       |

[toc] | [next] | [standalone]


#8704

FromJeff Higgins <jeff@invalid.invalid>
Date2011-10-11 10:28 -0400
Message-ID<j71jnp$b6u$1@dont-email.me>
In reply to#8700
On 10/04/2011 08:29 PM, Martin Gregorie wrote:
> I've just run rkhunter on one of my Linux boxes. It found an unexpected
> pair of files:
>
> /etc/.java/.systemPrefs/.system.lock
> /etc/.java/.systemPrefs/.systemRootModFile
>
> Both are empty and are timestamped "May  4 11:58" and so are probably
> connected to an SDK update since I found an archived copy of jdk-6u26-
> linux-i586.rpm with a timestamp of "May  4 11:59" on the same machine.
> What is odd is that I installed the same JDK on another machine at the
> same time and it doesn't have these odd files or the /etc/.java directory
> in its filing system.
>
> So, have any of you seen these files or know why they were created?
>
>
Just now and no. Debian squeeze with several Java versions all from the 
Debian repositories as far as I know.

[toc] | [prev] | [next] | [standalone]


#8705

FromRoedy Green <see_website@mindprod.com.invalid>
Date2011-10-11 08:08 -0700
Message-ID<ssm897tknask5828tlh366jh62e2ebfmhs@4ax.com>
In reply to#8704
On Tue, 11 Oct 2011 10:28:20 -0400, Jeff Higgins
<jeff@invalid.invalid> wrote, quoted or indirectly quoted someone who
said :

>> /etc/.java/.systemPrefs/.system.lock

That sounds like a file created to let everyone know some set of files
are busy.  Such files can be left behind if you abort or crash in mid
flight.

Did you abort an install?
-- 
Roedy Green Canadian Mind Products
http://mindprod.com
It should not be considered an error when the user starts something
already started or stops something already stopped. This applies
to browsers, services, editors... It is inexcusable to 
punish the user by requiring some elaborate sequence to atone,
e.g. open the task editor, find and kill some processes.

[toc] | [prev] | [next] | [standalone]


#8713

FromMartin Gregorie <martin@address-in-sig.invalid>
Date2011-10-11 19:38 +0000
Message-ID<j725vv$d92$2@localhost.localdomain>
In reply to#8705
On Tue, 11 Oct 2011 08:08:48 -0700, Roedy Green wrote:

> On Tue, 11 Oct 2011 10:28:20 -0400, Jeff Higgins <jeff@invalid.invalid>
> wrote, quoted or indirectly quoted someone who said :
> 
>>> /etc/.java/.systemPrefs/.system.lock
> 
> That sounds like a file created to let everyone know some set of files
> are busy.  Such files can be left behind if you abort or crash in mid
> flight.
> 
> Did you abort an install?
>
Not that I can remember.

I've recently replaced the chkrootkit checker, which seems to have become 
abandonware some time since 2009, with rkhunter because the chkrootkit FPs 
were becoming annoying and it turns out that rkhunter is directly 
supported by RedHat and included in current Fedora distros. While 
scanning the rkhunter documentation I noticed that by default it ignores 
/etc/.java and its contents, so evidently its considered benign.

So, thanks for your suggestions and comments. Its nice to know that it 
can safely be ignored.


-- 
martin@   | Martin Gregorie
gregorie. | Essex, UK
org       |

[toc] | [prev] | [next] | [standalone]


#8708

FromJeff Higgins <jeff@invalid.invalid>
Date2011-10-11 11:41 -0400
Message-ID<j71o19$a7o$1@dont-email.me>
In reply to#8704
On 10/11/2011 10:28 AM, Jeff Higgins wrote:
> On 10/04/2011 08:29 PM, Martin Gregorie wrote:
>> I've just run rkhunter on one of my Linux boxes. It found an unexpected
>> pair of files:
>>
>> /etc/.java/.systemPrefs/.system.lock
>> /etc/.java/.systemPrefs/.systemRootModFile
>>
>> Both are empty and are timestamped "May 4 11:58" and so are probably
>> connected to an SDK update since I found an archived copy of jdk-6u26-
>> linux-i586.rpm with a timestamp of "May 4 11:59" on the same machine.
>> What is odd is that I installed the same JDK on another machine at the
>> same time and it doesn't have these odd files or the /etc/.java directory
>> in its filing system.
>>
>> So, have any of you seen these files or know why they were created?
>>
>>
> Just now and no. Debian squeeze with several Java versions all from the
> Debian repositories as far as I know.
a web search term systemRootModFile seems to indicate the files are part 
of a normal install on some os. This link reenforces that impression.
<http://www-01.ibm.com/support/docview.wss?uid=swg21249277>

[toc] | [prev] | [next] | [standalone]


#8709

FromJeff Higgins <jeff@invalid.invalid>
Date2011-10-11 11:51 -0400
Message-ID<j71oiu$d99$1@dont-email.me>
In reply to#8708
On 10/11/2011 11:41 AM, Jeff Higgins wrote:
> On 10/11/2011 10:28 AM, Jeff Higgins wrote:
>> On 10/04/2011 08:29 PM, Martin Gregorie wrote:
>>> I've just run rkhunter on one of my Linux boxes. It found an unexpected
>>> pair of files:
>>>
>>> /etc/.java/.systemPrefs/.system.lock
>>> /etc/.java/.systemPrefs/.systemRootModFile
>>>
>>> Both are empty and are timestamped "May 4 11:58" and so are probably
>>> connected to an SDK update since I found an archived copy of jdk-6u26-
>>> linux-i586.rpm with a timestamp of "May 4 11:59" on the same machine.
>>> What is odd is that I installed the same JDK on another machine at the
>>> same time and it doesn't have these odd files or the /etc/.java
>>> directory
>>> in its filing system.
>>>
>>> So, have any of you seen these files or know why they were created?
>>>
>>>
>> Just now and no. Debian squeeze with several Java versions all from the
>> Debian repositories as far as I know.
> a web search term systemRootModFile seems to indicate the files are part
> of a normal install on some os. This link reenforces that impression.
> <http://www-01.ibm.com/support/docview.wss?uid=swg21249277>
>
and on this system it looks as if they were installed by gcj rather than 
sun or openjdk

[toc] | [prev] | [standalone]


Back to top | Article view | comp.lang.java.programmer


csiph-web