Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.sys.mac.system > #68293 > unrolled thread

Hidden applications running?

Started byhenry999@eircom.net (Henry)
First post2015-01-12 08:28 +0200
Last post2015-01-13 11:40 +1300
Articles 2 on this page of 22 — 9 participants

Back to article view | Back to comp.sys.mac.system


Contents

  Hidden applications running? henry999@eircom.net (Henry) - 2015-01-12 08:28 +0200
    Re: Hidden applications running? Alan Baker <alangbaker@telus.net> - 2015-01-11 23:59 -0800
    Re: Hidden applications running? Huge <Huge@nowhere.much.invalid> - 2015-01-12 12:15 +0000
      Re: Hidden applications running? henry999@eircom.net (Henry) - 2015-01-12 18:51 +0200
    Re: Hidden applications running? D Finnigan <dog_cow@macgui.com> - 2015-01-12 13:42 +0000
    Re: Hidden applications running? Jolly Roger <jollyroger@pobox.com> - 2015-01-12 13:46 +0000
      Re: Hidden applications running? Jolly Roger <jollyroger@pobox.com> - 2015-01-12 13:49 +0000
        Re: Hidden applications running? henry999@eircom.net (Henry) - 2015-01-12 18:51 +0200
          Re: Hidden applications running? Jolly Roger <jollyroger@pobox.com> - 2015-01-12 17:14 +0000
            Re: Hidden applications running? Jolly Roger <jollyroger@pobox.com> - 2015-01-12 17:15 +0000
              Re: Hidden applications running? JF Mezei <jfmezei.spamnot@vaxination.ca> - 2015-01-12 13:21 -0500
            Re: Hidden applications running? henry999@eircom.net (Henry) - 2015-01-13 06:34 +0200
              Re: Hidden applications running? Alan Baker <alangbaker@telus.net> - 2015-01-12 20:42 -0800
                Re: Hidden applications running? henry999@eircom.net (Henry) - 2015-01-13 11:16 +0200
              Re: Hidden applications running? Jolly Roger <jollyroger@pobox.com> - 2015-01-13 16:36 +0000
    Re: Hidden applications running? Aldo Raine <apache@scalpem.net> - 2015-01-12 10:01 -0500
    Re: Hidden applications running? Doc O'Leary  <droleary@2usenet2014.subsume.com> - 2015-01-12 15:38 +0000
      Re: Hidden applications running? JF Mezei <jfmezei.spamnot@vaxination.ca> - 2015-01-12 13:18 -0500
        Re: Hidden applications running? Jolly Roger <jollyroger@pobox.com> - 2015-01-12 18:41 +0000
          Re: Hidden applications running? dempson@actrix.gen.nz (David Empson) - 2015-01-13 09:46 +1300
            Re: Hidden applications running? Jolly Roger <jollyroger@pobox.com> - 2015-01-12 21:55 +0000
              Re: Hidden applications running? dempson@actrix.gen.nz (David Empson) - 2015-01-13 11:40 +1300

Page 2 of 2 — ← Prev page 1 [2]


#68324

FromJolly Roger <jollyroger@pobox.com>
Date2015-01-12 21:55 +0000
Message-ID<chiu64F55hkU1@mid.individual.net>
In reply to#68319
On 2015-01-12, David Empson <dempson@actrix.gen.nz> wrote:
> Jolly Roger <jollyroger@pobox.com> wrote:
>
>> On 2015-01-12, JF Mezei <jfmezei.spamnot@vaxination.ca> wrote:
>> > On 15-01-12 10:38, Doc O'Leary wrote:
>> >
>> >> lsof | grep "No. 2"
>> >
>> >
>> > Shouldn't a normal user have to use sudo for this command to see other
>> > people/processes files which are in use ?  or does lsof elevate its own
>> > privs so that sudo is not necessary ?
>> 
>> Yes, but it's doubtful that another user account has files open on the
>> OP's removable drive.
>
> It is possible that a system process is the culprit

I didn't say it was impossible. Also, Spotlight indexing processes like
mdworker run under the user account of the logged in user.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

[toc] | [prev] | [next] | [standalone]


#68325

Fromdempson@actrix.gen.nz (David Empson)
Date2015-01-13 11:40 +1300
Message-ID<1ly6pm1.1kclrab72mkbvN%dempson@actrix.gen.nz>
In reply to#68324
Jolly Roger <jollyroger@pobox.com> wrote:

> On 2015-01-12, David Empson <dempson@actrix.gen.nz> wrote:
> > Jolly Roger <jollyroger@pobox.com> wrote:
> >
> >> On 2015-01-12, JF Mezei <jfmezei.spamnot@vaxination.ca> wrote:
> >> > On 15-01-12 10:38, Doc O'Leary wrote:
> >> >
> >> >> lsof | grep "No. 2"
> >> >
> >> >
> >> > Shouldn't a normal user have to use sudo for this command to see other
> >> > people/processes files which are in use ?  or does lsof elevate its own
> >> > privs so that sudo is not necessary ?
> >> 
> >> Yes, but it's doubtful that another user account has files open on the
> >> OP's removable drive.
> >
> > It is possible that a system process is the culprit
> 
> I didn't say it was impossible. Also, Spotlight indexing processes like
> mdworker run under the user account of the logged in user.

On my system right now I have multiple instances of mdworker running,
most owned by me, but one is running under the _spotlight account. There
are also other md* processes running as root, though I haven't
investigated which of them might be involved in indexing. (mds,
mds_stores, mdflagwriter.)

I happen to have an SD card mounted, which contains a bootable OS X
system. lsof shows nothing for my account, but sudo lsof shows over 100
open files for the root account, including Spotlight indexes opened by
mds_store, many folders opened by notifyd, one by kextd, some more by
mds, and revisiond has the DocumentRevisions hierarchy open.

With this much noise, if I was having trouble ejecting that drive it
would be hard to spot the cause. Definitely worth using plain lsof first
to rule out low hanging fruit.

Mounted HFS+ volumes with no bootable system on them still have a few
items open as root from mds and revisiond. A FAT32 volume just has mds
owned by root with the top-level folder on the volume open (twice).

-- 
David Empson
dempson@actrix.gen.nz

[toc] | [prev] | [standalone]


Page 2 of 2 — ← Prev page 1 [2]

Back to top | Article view | comp.sys.mac.system


csiph-web